{"id":26138,"date":"2026-09-18T08:32:18","date_gmt":"2026-09-18T00:32:18","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-54521"},"modified":"2026-09-18T08:32:18","modified_gmt":"2026-09-18T00:32:18","slug":"cve-2026-54521","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-54521","title":{"rendered":"CVE-2026-54521 [MEDIUM] &#8211; FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior"},"content":{"rendered":"<p>FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319, the ActivityAMP AMP message renderer in app\/src\/main\/java\/eu\/faircode\/email\/ActivityAMP.java enables JavaScript in its WebView but incompletely sanitizes untrusted message HTML. For non-allowlisted hosts, script.removeAttr(&#8220;src&#8221;) leaves inline script elements in the document and does not reject event-handler attributes or javascript: URLs on other elements. A crafted AMP email can execute arbitrary JavaScript when a recipient opens the message and enables the AMP toggle. The script can read the message DOM, exfiltrate message data, and display phishing overlays within the message-body area. Exploitation requires the recipient to enable the AMP toggle, and practical exposure is reduced because AMP email is uncommon. This issue is fixed in version 1.2319.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319, the ActivityAMP AMP message renderer in app\/src\/main\/java\/eu\/faircode\/email\/ActivityAMP.java enable<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-26138","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/26138","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26138"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26138"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}