Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-18724
Disclosure Date: February 03, 2021 (last updated February 22, 2025)
Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.
0
Attacker Value
Unknown
CVE-2020-18723
Disclosure Date: February 03, 2021 (last updated February 22, 2025)
Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.
0
Attacker Value
Unknown
CVE-2018-17792
Disclosure Date: July 19, 2019 (last updated November 27, 2024)
MDaemon Webmail (formerly WorldClient) has CSRF.
0
