Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-11182

Stored XSS vulnerability in MDaemon Email Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ESET

Description

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MDaemon Email Server

Default version status: unaffected

  • 0 to ≤ 24.5.0affected
  • 24.5.1unaffected

References