Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
7.2CVSS5.8AI score0.00237EPSS
SaveExploits0References4
FreeBSD•added 2025/01/29 12:0 a.m.•13 views
postorius -- XSS
NIST reports: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
