Unpatched Bug in RainLoop Webmail Could Give Hackers Access to all Emails
Tracked as CVE-2022-29360, the flaw relates to a stored cross-site-scripting (XSS) vulnerability impacting the latest version of RainLoop (v1.16.0) that was released on May 7, 2021.