description: A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.
problem types: Reflected XSS
affected:
{
product: Apache Pony Mail (incubating)
vendor: The Apache Software Foundation
versions:
status: affected, version: 0.8 to 0.10
}