Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•26 views

mailcow dockerized 跨站脚本漏洞

Mailcow Dockerized is an open-source application developed by Mailcow. The version 2026-03b of Mailcow Dockerized contains a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site scripting vulnerability in the administrator’s queue manager, which may cause t...

7.4CVSS5.7AI score0.00412EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•9 views

CVE-2026-7460: Improper Neutralization of Input During Web Page Generation

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

7.4CVSS5.7AI score0.00412EPSS
SaveExploits0References2
Rows per page
Query Builder