Medium severity5.4NVD Advisory· Published Feb 3, 2021· Updated Jun 17, 2026

CVE-2020-18723

Description

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alt N/Mdaemon Webmail
cpe:2.3:a:altn:mdaemon_webmail:*:*:*:*:*:*:*:*
Range: <20.0.1
MDaemon/webmaildescription
Alt N/Webmailllm-create
Range: 19.5.5

Patches

Vulnerability mechanics

References

kailashbohara.com.np/blog/2020/07/15/mdaemon-stored-xssnvdExploitThird Party Advisory
packetstormsecurity.com/files/161332/Alt-N-MDaemon-Webmail-20.0.0-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
www.altn.com/Support/SecurityUpdate/MD082520_MDaemon_EN/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000