Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages. This vulnerability is addressed in the following product update:
Usermin, Usermin, 1.080
Publication date: Fri, 06 Aug 2004 09:00:00 +0000