Unrated severityCISA KEVNVD Advisory· Published Nov 15, 2024· Updated Oct 21, 2025
Stored XSS vulnerability in MDaemon Email Server
CVE-2024-11182
Description
An XSS issue was discovered in
MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker
to load arbitrary JavaScript code in the context of a webmail user's browser window.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <24.5.1c
- MDaemon/Email Serverv5Range: 0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.