[Bug 1173792] VUL-0: CVE-2020-15562: XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns