| Package | Affected versions | Patched versions |
|---|---|---|
| webmail | < 1.13.0 | 1.13.0 |
RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free