postfixadmin vulnerabilities

CVEs whose affected-version data names the postfixadmin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121551Medium· 5.4

5d ago

PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description

PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to inject script by creating a TOTP exception with an unescaped description. When a global administrator views totp-e…

▾ Sunlitpostfixadmin · postfixadminEPSS 0.28%via CVEORG