Most recent entries from all

EUVD-2026-169641

fkie_cve-2012-0323

Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-7f8p-fv57-7cr3

Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

gsd-2012-0323

jvndb-2012-000021

The SquirrelMail plugin Autocomplete contains a cross-site scripting vulnerability. The Autocomplete plugin in SquirrelMail searches for registered email addresses in user contacts as the user types into specific fields. The Autocomplete plugin contains a cross-site scripting vulnerability. Masaki Konishi of M&K reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.