https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 13:13:52 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-104083 <p>SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a &lt;style&gt; element nested within MathML foreign content (&lt;math&gt;&lt;mtext&gt;&lt;mglyph&gt;), which the custom HTML sanitizer treats as inert CDATA text but browsers reparse as live markup. Attackers can deliver a crafted calendar (iCal) message containing an &lt;img src=x onerror=...&gt; payload that executes automatically in the recipient&#39;s webmail session at /interface/message-iframe when the message is opened, enabling script execution and data exfiltration unconstrained by the interface&#39;s permissive Content-Security-Policy.</p> <p>SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a &lt;style&gt; element nested within MathML foreign content (&lt;math&gt;&lt;mtext&gt;&lt;mglyph&gt;), which the custom HTML sanitizer treats as inert CDATA text but browsers reparse as live markup. Attackers can deliver a crafted calendar (iCal) message containing an &lt;img src=x onerror=...&gt; payload that executes automatically in the recipient&#39;s webmail session at /interface/message-iframe when the message is opened, enabling script execution and data exfiltration unconstrained by the interface&#39;s permissive Content-Security-Policy.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-104083 https://vulnerability.circl.lu/vuln/ghsa-vvh8-jc22-6q2f <p>SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a &lt;style&gt; element nested within MathML foreign content (&lt;math&gt;&lt;mtext&gt;&lt;mglyph&gt;), which the custom HTML sanitizer treats as inert CDATA text but browsers reparse as live markup. Attackers can deliver a crafted calendar (iCal) message containing an &lt;img src=x onerror=...&gt; payload that executes automatically in the recipient&#39;s webmail session at /interface/message-iframe when the message is opened, enabling script execution and data exfiltration unconstrained by the interface&#39;s permissive Content-Security-Policy.</p> <p>SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a &lt;style&gt; element nested within MathML foreign content (&lt;math&gt;&lt;mtext&gt;&lt;mglyph&gt;), which the custom HTML sanitizer treats as inert CDATA text but browsers reparse as live markup. Attackers can deliver a crafted calendar (iCal) message containing an &lt;img src=x onerror=...&gt; payload that executes automatically in the recipient&#39;s webmail session at /interface/message-iframe when the message is opened, enabling script execution and data exfiltration unconstrained by the interface&#39;s permissive Content-Security-Policy.</p> https://vulnerability.circl.lu/vuln/ghsa-vvh8-jc22-6q2f