CVE Intelligence

Postorius Project Postorius vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Postorius Project Postorius: 1 record(s), with affected versions and fixes.
cpe:2.3:a:postorius_project:postorius

CVE-2026-44742 Medium · 6.1 CWE-79 May 7, 2026
Cross-site Scripting (XSS) in Postorius Project Postorius
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.