nextcloud mail vulnerabilities (CVE)

CVE records published for nextcloud mail, newest first. Follow to get an email when a new one appears.

1 results

3.5Low

CVE-2025-66514 11 months ago

Nextcloud Mail stored HTML injection in subject text

nextcloud security-advisories

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injection in the Mail app's message list allowed an authenticated user to inject HTML into the email subjects. Javascript was correctly blocked by…