Actively exploited vulnerabilities affecting MDaemon products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2024-11182https://wildfortech.com/security#CVE-2024-11182MDaemon Email Server contains a cross-site scripting flaw that lets a remote attacker embed and execute arbitrary JavaScript in a victim's browser simply by sending a crafted HTML email. Because email is a universal attack vector requiring no special access, this vulnerability has a broad potential impact — any user who opens a malicious message could have their session hijacked, credentials stolen, or browser actions manipulated without any further interaction from the attacker.Mon, 19 May 2025 00:00:00 GMTMDaemonEmail Server