A vulnerability in Airmail's URL scheme handling allows XSS attacks through specially crafted file:// URLs in email content.

  • Product: Airmail (macOS/iOS)
  • Type: XSS via URL Scheme
  • Reference: Full Disclosure