Unrated severityCISA KEVNVD Advisory· Published Nov 15, 2024· Updated Oct 21, 2025
Stored XSS vulnerability in MDaemon Email Server
CVE-2024-11182
Description
An XSS issue was discovered in
MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker
to load arbitrary JavaScript code in the context of a webmail user's browser window.
Affected products
1- MDaemon/Email Serverv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.