CVE-2002-1649

No fix known EPSS 1%

Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.

Published 2005-03-28 · CVE record · OSV

Products: squirrelmail