Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
7.2CVSS5.8AI score0.00237EPSS
SaveExploits0References4
FreeBSD•added 2025/01/29 12:00 a.m.•15 views
postorius -- XSS
NIST reports: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
