medium6.5
CVE-2016-7968
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled.
Impact
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code was executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kde | Kmail | through 5.3.0 |