high7.2
CVE-2025-30090
mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishan…
Impact
mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| SquirrelMail | SquirrelMail | through 1.4.23-svn-2025040 |
| 1 And 1.5.X | through 1.5.2-svn-2025040 |
Versions were read from the advisory text. No structured product data has been published for this record yet.