MDaemon Email Server: Email Server Cross-Site Scripting (XSS) Vulnerability ยท updates https://pwn.watch/i/mdaemon-email-server-cve-2024-11182 MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message. Added to CISA KEV on 2025-05-19. en Mon, 19 May 2025 00:00:00 GMT MDaemon Email Server: Email Server Cross-Site Scripting (XSS) Vulnerability: CISA added CVE-2024-11182 to the KEV catalog (due 2025-06-09). https://pwn.watch/i/mdaemon-email-server-cve-2024-11182 https://pwn.watch/i/mdaemon-email-server-cve-2024-11182#2025-05-19-ab8df1d4 Mon, 19 May 2025 00:00:00 GMT medium <p>MDaemon Email Server: Email Server Cross-Site Scripting (XSS) Vulnerability: CISA added CVE-2024-11182 to the KEV catalog (due 2025-06-09).</p>