WS-2023-0061

Folder in modoboa-webmail mailbox is vulnerable to Reflected Cross-Site Scripting. An attacker can use the vulnerability to construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of...

WS-2023-0056

A Stored/Persistent Cross-Site-Scripting XSS vulnerability exists in modoboa/modoboa-webmail prior to 1.7.2 due to the XSS playload injected in "Display Name" parameter in creating Contacts...