XSS in mail queue fields
Affected packages
pmg-gui
Details
Missing encoding in the Proxmox Mail Gateway UI led to HTML code contained in fields of the mail queue view to be rendered by the browser.
This issue was reported by Niels Hendriks from Rootnet.
Fixed in
pmg-gui >= 4.1.2
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.