CVE-2019-9558

Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.

• CWE-79

• https://packetstormsecurity.com/files/151957/Mailtraq-WebMail-2.17.7.3550-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/151957/Mailtraq-WebMail-2.17.7.3550-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry

Published

Mar 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9552Eloan V3.0 through 2018-09-20 allows remote attackers to lis…
• CVE-2019-9553Bolt 3.6.4 has XSS via the slug, teaser, or title parameter …6.1
• CVE-2019-9554In the 3.1.12 Pro version of Craft CMS, XSS has been discove…6.1
• CVE-2019-9555Sagemcom F@st 5260 routers using firmware version 0.4.39, in…
• CVE-2019-9556FiberHome an5506-04-f RP2669 devices have XSS.5.4
• CVE-2019-9557Ability Mail Server 4.2.6 has Persistent Cross Site Scriptin…
• CVE-2019-9563In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-…
• CVE-2019-9564A vulnerability in the authentication logic of Wyze Cam Pan …9.8
• CVE-2019-9565Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.393…
• CVE-2019-9566FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= requ…
• CVE-2019-9567The "Forminator Contact Form, Poll & Quiz Builder" plugin be…6.1
• CVE-2019-9568The "Forminator Contact Form, Poll & Quiz Builder" plugin be…6.5