Nameko Webmail Cross-Site Scripting Vulnerability

Summary
This host is running Nameko Webmail and is prone to cross-site scripting vulnerability.
Impact
Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Impact Level: Application
Solution
Upgrade to version 1.9.999.10 or later For updates refer to http://sourceforge.net/projects/nameko
Insight
Input passed via the 'fontsize' parameter to 'nameko.php' php script is not properly sanitised before being returned to the user.
Affected
Nameko Webmail version 0.10.146 and prior
References