Inflection: Unsubscribe Any User

Researcher reported that HubSpot's "unsubscribe" feature allows any user to unsubscribe from marketing emails without having to confirm their email address. Inflection does not consider this a vulnerability, as we want to make it as easy as possible for users to stop receiving marketing emails th...

Mail.ru: XSS в письме, в поле отправителя.

User-assisted XSS in message reading Unsubscribe feature via crafted List-Unsubscribe header in e.mail.ru Web mail interface...

id.bayan.ir XSS vulnerability

Vulnerable URL: http://id.bayan.ir/bayan/dynaform/mlunsubscribe/s/-/0?sk=test=academy= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...