CVE-2024-27186

MEDIUM6.1EPSS 0.09%

[20240803] - Core - XSS in HTML Mail Templates

Published: 6/5/2025Modified: 6/5/2025

Description

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References (2)

CVE-2024-27186 — [20240803] - Core - XSS in HTML Mail Templates · VulnScope