CVE-2019-9557

Name of the Vulnerable Software and Affected Versions Ability Mail Server version 4.2.6

Description The issue allows for Persistent Cross Site Scripting (XSS) via the email body. To exploit this, the victim must open an email containing malicious Javascript inserted into the body as an iframe.

Recommendations For Ability Mail Server version 4.2.6, consider disabling the ability to insert iframes into email bodies as a temporary workaround until a patch is available. Restrict access to emails with potentially malicious content to minimize the risk of exploitation.