← Database

CVE-2026-44742

HIGH CVSS: 7.2 Published: 2026-05-07 Modified: 2026-06-17

Description

Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.

Affected Platforms

Postorius Project Postorius

Weakness Type

CWE-79

References