| Package | Affected versions | Patched versions |
|---|---|---|
| sqwebmail | = 3.4.1= 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.6.0= 3.6.1= 4.0.4_2004-05-24= 4.0.5= 4.0.6= 4.0.7= 5.0.0= 5.0.1= 5.0.4 |
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free