Firetruck

CVE-2024-11182

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Email ServerMDaemon / Email Server>= 0, <= 24.5.0affected
Email ServerMDaemon / Email Server24.5.1unaffected