CVE-2024-11182 MDaemon Email Server
MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message.
- CVSS
- not scored
On CISA’s exploited list
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
- Added
- 2025-05-19
- Federal patch deadline
- 2025-06-09
- Ransomware use
- not known