CVE-2022-29360

Name of the Vulnerable Software and Affected Versions RainLoop versions through 1.6.0

Description The issue allows for XSS via a crafted email message in the Email Viewer. This can potentially be exploited to steal users' emails.

Recommendations For versions through 1.6.0, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the use of the Email Viewer until a patch is available. Avoid using the Email Viewer with crafted email messages until the issue is resolved.