CVE-2019-9558 Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript....
MediumCVSS 6.1
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailtraq webmail | = 2.17.7.3550 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry