CVE Intelligence

Mdaemon Mdaemon vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mdaemon Mdaemon: 1 record(s), with affected versions and fixes.
cpe:2.3:a:mdaemon:mdaemon

CVE-2024-11182 Medium · 6.1 KEV High · 53 CWE-79 Nov 15, 2024
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.