MindPalette NateMail 3.0.15 - Cross-Site Scripting

MindPalette NateMail 3.0.15 is susceptible to reflected cross-site scripting which could allows an attacker to execute remote JavaScript in a victim's browser via a specially crafted POST request. The application will reflect the recipient value if it is not in the NateMail recipient array. Note...

CVE-2019-13392

A reflected Cross-Site Scripting XSS vulnerability in MindPalette NateMail 3.0.15 allows an attacker to execute remote JavaScript in a victim's browser via a specially crafted POST request. The application will reflect the recipient value if it is not in the NateMail recipient array. Note that th...

CVE-2019-13392

MindPalette NateMail 3.0.15 is affected by a reflected Cross-Site Scripting (XSS) vulnerability. A crafted POST request can cause the app to reflect the recipient value in the response if the value is not present in the NateMail recipient array, with the array keyed by integers by default (string...