Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/20 2:19 a.m.6 views

CVE-2026-7460 mailcow-dockerized 2026-03b - Stored XSS in Queue Manager via unescaped

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

7.4CVSS5.8AI score0.0032EPSS
SaveExploits0References4
Rows per page
Query Builder