CVE-2024-11182 – Stored XSS vulnerability in MDaemon Email Server

https://notcve.org/view.php?id=CVE-2024-11182

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window. Se descubrió un problema de XSS en MDaemon Email Server anterior a la versión 24.5.1c. Un atacante puede enviar un mensaje de correo electrónico HTML con JavaScript en una etiqueta img. • https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •