Cross-Site Scripting (XSS)

squirrelmail is vulnerable to cross-site scripting. Insufficient HTML mail sanitization allows a remote attacker to send a specially-crafted HTML mail or attachment that could cause a user's Web browser to execute a malicious script in the context of the SquirrelMail session when that email or...