Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds