Cross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to inject arbitrary web script or HTML via the email parameter.
| Software | From | Fixed in |
|---|---|---|
| woppoware / postmaster | 4.2.2_build3.2.5 | 4.2.2_build3.2.5.x |