Rumble Mail Server Cross-Site Scripting Vulnerability (CNVD-2022-63575)

Rumble Mail Server is a mail server suite for SMTP (ESMTPSA), HTTP, POP3, and IMAP4v1 from Daniel Gruno’s personal developer.Rumble Mail Server version 0.51.3135 is vulnerable to a cross-site scripting vulnerability that stems from the servername parameter lacks a data validation filter for user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.