MDaemon vulnerabilities (CVE)

CVE records published for MDaemon, newest first. Follow to get an email when a new one appears.

2 results
5.3Medium
CVE-2025-3929

Stored XSS vulnerability in MDaemon Email Server

MDaemon Email Server

An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a …

5.3Medium
CVE-2024-11182 KEV

Stored XSS vulnerability in MDaemon Email Server

MDaemon Email Server

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user'…

33%EPSS