CVE Intelligence

MDaemon Email Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting MDaemon Email Server: 1 record(s), with affected versions and fixes.

CVE-2024-11182 Medium · 6.1 KEV High · 53 CWE-79 Nov 15, 2024
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.