CVE-2019-9558

Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message

published March 12, 2019

CVSS
—
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00986 · 61.8th percentile
Published
2019-03-12T20:00Z
EPSS history
Timeline
  • 12 MAR 20:00Z
    Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message
    cvelistv5