Description The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. Remediation References CVE-2024-27186 Related Vulnerabilities ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1665) MySQL Other Vulnerability (CVE-2010-3682) PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-20001) PHP Other Vulnerability (CVE-2002-2214) Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-4599) Severity Medium Classification CVE-2024-27186 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities