PatchTheCVE: rumble mail serverhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-43462: A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.https://patchthecve.com/cve/CVE-2021-43462.htmlhttps://patchthecve.com/cve/CVE-2021-43462.htmlWed, 17 Jun 2026 04:11:00 +0000MEDIUM 5.4: A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.CVE-2021-43461: Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.https://patchthecve.com/cve/CVE-2021-43461.htmlhttps://patchthecve.com/cve/CVE-2021-43461.htmlWed, 17 Jun 2026 04:11:00 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.CVE-2021-43459: A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) phttps://patchthecve.com/cve/CVE-2021-43459.htmlhttps://patchthecve.com/cve/CVE-2021-43459.htmlWed, 17 Jun 2026 04:11:00 +0000MEDIUM 5.4: A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) path parameters.CVE-2021-43456: An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted filhttps://patchthecve.com/cve/CVE-2021-43456.htmlhttps://patchthecve.com/cve/CVE-2021-43456.htmlWed, 17 Jun 2026 04:10:59 +0000HIGH 7.8: An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the RumbleService executable service path.