CVE-2025-25363

An authenticated stored cross-site scripting XSS vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center JEMH before v4.1.69-dc allows attackers with Administrator privileges to execute arbitrary Javascript in context of a user's browser via injecting a crafted payload int...

CVE-2025-25363

The Enterprise Mail Handler for Jira Data Center (JEMH) (by The Plugin People) is vulnerable to an authenticated stored cross-site scripting (XSS) vulnerability in versions prior to v4.1.69-dc . An attacker with Administrator privileges can execute arbitrary JavaScript in a user's browser by inje...

PT-2025-13020

Name of the Vulnerable Software and Affected Versions Exim versions 4.96 through 4.98.1 Description A use-after-free in Exim could allow users with command-line access to escalate privileges. This issue affects nearly 50% of mail servers worldwide, posing a significant risk to system integrity. T...

Atlassian Plugin People Enterprise MailHandler for Jira Data Center security vulnerabilities

Atlassian Plugin People Enterprise Mail Handler for Jira Data Center is an enterprise message handling plugin from Atlassian Australia. A security vulnerability exists in Atlassian Plugin People Enterprise Mail Handler for Jira Data Center versions prior to 4.1.69-dc. An attacker can exploit this...

PT-2025-11218

Name of the Vulnerable Software and Affected Versions: The Plugin People Enterprise Mail Handler for Jira Data Center versions prior to 4.1.69-dc Description: An authenticated stored cross-site scripting issue allows attackers with Administrator privileges to execute arbitrary Javascript in the...

CVE-2025-25363: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

An authenticated stored cross-site scripting XSS vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center JEMH before v4.1.69-dc allows attackers with Administrator privileges to execute arbitrary Javascript in context of a user's browser via injecting a crafted payload int...

[SECURITY] Fedora 41 Update: thunderbird-128.8.0-1.fc41

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2025-27915

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its...

CVE-2024-46663

A stack-buffer overflow vulnerability CWE-121 in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands...

CVE-2025-27823

An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Si...

PT-2025-17241 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB version 1.8.38 Description: An issue in MyBB allows a remote attacker to obtain sensitive information via the Mail function. Recommendations: For MyBB version 1.8.38, consider disabling the Mail function as a temporary workaround until a...

mail.lumc.ca Cross Site Scripting vulnerability OBB-4034252

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mail.lasertrans.com Cross Site Scripting vulnerability OBB-4034251

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress plugin SMTP by BestWebSoft: Code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2025-27823

An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Si...

CVE-2025-27823

CVE-2025-27823 concerns the Mail Disguise module for Backdrop CMS, prior to version 1.x-1.0.5. The issue arises from insufficient validation of the data attribute value on links, which can enable a Cross Site Scripting (XSS) vulnerability if an attacker can insert anchor elements containing data ...

CVE-2025-27823

An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Si...

CVE-2025-27823

An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Si...

CVE-2025-27823

An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Si...

Sage 200 Spain security vulnerabilities

Sage 200 Spain is a business management software from Sage. A security vulnerability exists in Sage 200 Spain versions prior to 2025.35.000, which stems from a Pass-Back vulnerability that could lead to the discovery of stored SMTP credentials by a privileged administrator user...