413 matches found
CVE-2025-53464
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...
CVE-2025-53464 WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ironikus WP Mailto Links allows Stored XSS. This issue affects WP Mailto Links: from n/a through 3.1.4...
CVE-2025-53464 WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...
CVE-2025-53464
CVE-2025-53464 affects the WordPress plugin WP Mailto Links, with a Stored XSS vulnerability in the plugin’s handling of input during web page generation. Affected versions are listed as WP Mailto Links
WordPress plugin WP Mailto Links 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
PT-2025-39000
Name of the Vulnerable Software and Affected Versions Ironikus WP Mailto Links versions through 3.1.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance...
PT-2025-42624
Name of the Vulnerable Software and Affected Versions Squid versions prior to 7.2 Squid versions 3.x through 3.5.28 Squid versions 4.x through 4.17 Squid versions 5.x through 5.9 Squid versions 6.x through 6.14 Squid versions 7.x through 7.1 Description Squid, a caching proxy for the Web, contain...
Ubuntu 18.04 LTS / 20.04 LTS : KMail vulnerabilities (USN-7731-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7731-1 advisory. Damian Poddebniak, Christian Dresen, Jens Mller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jrg Schwenk...
Linux Distros Unpatched Vulnerability : CVE-2022-39376
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features,...
Linux Distros Unpatched Vulnerability : CVE-2020-14932
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php...
USN-7729-1 kdepim vulnerabilities
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that the KMail application of KDE PIM could be made to leak the plaintext of S/MIME encrypted emails when retrieving external content in emails. Und...
Linux Distros Unpatched Vulnerability : CVE-2018-25047
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smartyfunctionmailto, and that could be...
Linux Distros Unpatched Vulnerability : CVE-2023-27985
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of complian...
Linux Distros Unpatched Vulnerability : CVE-2020-11880
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 mailto?attach=... parameter, a website or other source of mailto links...
Linux Distros Unpatched Vulnerability : CVE-2023-27986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote...
NewStart CGSL MAIN 7.02 : xdg-utils Vulnerability (NS-SA-2025-0195)
The remote NewStart CGSL host, running version MAIN 7.02, has xdg-utils packages installed that are affected by a vulnerability: - When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not...
CLSA-2025-1751913634 xdg-utils: Fix of 2 CVEs
xdg-email: disable special support for Thunderbird to address following vulnerabilities: - CVE-2020-27748: local file inclusion vulnerability - CVE-2022-4055: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments...
CVE-2023-5109
The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpmlmailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2020-4089
HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected...