Nextcloud · Report #3357036
Mail stored HTML injection in subject text
Validstatus
mediumseverity
48upvotes
12 Feb 2026disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v394-8gpc-6fv5
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.