postfixadmin

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

postfixadmin records in CISA KEV

No postfixadmin vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-84357 CVE-2026-121551 · GHSA-3mcr-px3q-mcw8

Stored cross-site scripting in PostfixAdmin TOTP exceptions

LOW 23

PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to inject script by creating a TOTP exception with an unescaped description.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00283 Published 2026-11-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0