RainLoop Webmail 跨站脚本漏洞

RainLoop Webmail is a web-based email client software. A cross-site scripting vulnerability exists in RainLoop Webmail 1.6.0 and earlier versions, which stems from a failure to properly clean up when processing HTML content, and can be exploited by an attacker to take control of a victim's sessio...