Medium severity6.1CISA KEVNVD Advisory· Published Nov 15, 2024· Updated Jun 17, 2026
CVE-2024-11182
CVE-2024-11182
Description
An XSS issue was discovered in
MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker
to load arbitrary JavaScript code in the context of a webmail user's browser window.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<24.5.1c+ 1 more
- (no CPE)range: <24.5.1c
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- files.mdaemon.com/mdaemon/beta/RelNotes_en.htmlnvdRelease Notes
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.