Record · corpus.blog/posts/01a08790-9c56-725e-b977-036ccd6357a1

Multiple XSS Vulnerabilities in Mailcow

aikido.dev · published 17 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aikido.dev Wayback capture

2blogs citing

First cited: 21 Apr 2026
Most recent: 28 Aug 2026
Rank this month: not ranked
External links: 16
Words captured: 2,449

Cited by

Blog

In the post

Date

Intigriti

Intigriti Bug Bytes #239 - August 2026 🚀 Read at the source ↗

28 Aug 2026

jorianwoltjer.com

Roundcube XSS chained with cookie tossing for full inbox access Read at the source ↗

21 Apr 2026

Links from this post

Link

Host

https://www.aikido.dev/attack/aipentest

aikido.dev

https://github.com/FreddleSpl0it

github.com

https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-f9xf-vc72-rcgm

github.com

StateRestore 2.0.1 released

datatables.net

https://github.com/mailcow/mailcow-dockerized/blob/b84ba8ded12fc5646a634cf8d39f8a5c9b298088/data/web/js/site/dashboard.js

github.com

https://github.com/mailcow/mailcow-dockerized/pull/7173/changes

github.com

https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-2xjc-rg88-jvpp

github.com

https://github.com/mailcow/mailcow-dockerized/blob/f399c07c85775fcb68d9afec1b9903c9c1c0edf3/data/web/js/site/quarantine.js

github.com

https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-jprq-w83q-q62h

github.com

https://github.com/mailcow/mailcow-dockerized/blob/b84ba8ded12fc5646a634cf8d39f8a5c9b298088/data/web/js/site/user.js

github.com

https://developer.mozilla.org/en-US/docs/Web/API/Window/opener

developer.mozilla.org

https://github.com/mailcow/mailcow-dockerized/releases/tag/2026-03b

github.com

https://app.aikido.dev/

app.aikido.dev

https://www.aikido.dev/platform/attack

aikido.dev

https://app.aikido.dev/login

app.aikido.dev

https://www.aikido.dev/contact

aikido.dev