CVE-2019-12970

XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mail can be executed within the application context via crafted use of...

CVE-2019-12970: Improper Neutralization of Input During Web Page Generation

XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mail can be executed within the application context via crafted use of...

PT-2019-13061

Name of the Vulnerable Software and Affected Versions SquirrelMail versions 1.4.22 and earlier SquirrelMail versions 1.5.x through 1.5.2 Description A security issue was discovered due to improper handling of RCDATA and RAWTEXT type elements, allowing the built-in sanitization mechanism to be...