Vendors / Postorius project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Postorius project records in CISA KEV No Postorius project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-05-07 · No fix listed CWE-79
Priority LOW 27
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.01209 · Published 2021-09-10 · Fixed in 1.3.5 CWE-284
Open these records in search → All records by CVSS severity
0 1 1 0 0
