CVE-2018-14952

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

CVE-2018-14952: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14950: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

PT-2018-12827

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, such as a "form action='data:text" attack. Recommendations...

PT-2018-12830

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue affects the mail message display page, where an XSS attack can be performed via the formaction attribute. Recommendations For versions prior to 1.4.23, update to version 1.4.23 or lat...

PT-2018-12829

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, namely a "math xlink:href=" attack. Recommendations For...

CVE-2018-14951: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14954: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14953: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

PT-2018-12826

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific vector involving an svg tag and an xlink:href attribute. Recommendations F...

PT-2018-12828

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific input, such as a "maction xlink:href=" attack. Recommendations For...

CVE-2018-14955: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...