MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
MDaemon · Email Server
Date added (CISA)
2025-05-19
Remediation due
2025-06-09
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message.