CVE-2019-15054: Getmailbird Mailbird

Medium severity, CVSS 6.1. EPSS: 2.7% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Mailbird before 2.7.5.0 r allow remote attackers to execute arbitrary JavaScript in a privileged context via a crafted HTML mail message. This vulnerability is distinct from CVE-2015-4657.

Affected products

• Getmailbird Mailbird: before 2.7.5.0 (fixed in 2.7.5.0)

Published 2019-11-18. Last modified 2026-06-17.