XSS in Hypermail-Project Hypermail

CVE-2010-4339

Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing messages.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (55.9th percentile) — read the EPSS interpretation.