CVE Intelligence

Postorius Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Postorius Project products: 1 record(s), with severity, exploitation and fixes.

Postorius 1

Exploited only (KEV) →

CVE-2026-44742 Medium · 6.1 CWE-79 May 7, 2026
Cross-site Scripting (XSS) in Postorius Project Postorius
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.