CVE-2002-1341: Squirrelmail

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.

Affected products

• Squirrelmail Squirrelmail: version 1.2.6 only; version 1.2.7 only; version 1.2.8 only; version 1.2.9 only; version 1.2.10 only

Published 2002-12-18. Last modified 2026-06-16.