| Package | Affected versions | Patched versions |
|---|---|---|
| mailbird | < 2.7.5.0 | 2.7.5.0 |
Multiple cross-site scripting (XSS) vulnerabilities in Mailbird before 2.7.5.0 r allow remote attackers to execute arbitrary JavaScript in a privileged context via a crafted HTML mail message. This vulnerability is distinct from CVE-2015-4657.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free