| Package | Affected versions | Patched versions |
|---|---|---|
| ability mail server | = 4.2.6 |
Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free