Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter.
CPE | Name | Operator | Version |
---|---|---|---|
hastymail2 | le | 1.0 |