Security Advisory

CVE-2020-18724

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-02-03 17:27:42
Last updated 2024-08-04 14:08:29
Assigner mitre
State PUBLISHED

Description

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.