CVE-2026-103647 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer
CVE ID :CVE-2026-103647 Published : Oct. 8, 2026, 10:53 a.m. | 36 minutes ago Description :Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that...