CVE-2025-34402

Publication date

2025-12-09 18:08:44

Family

VulnCheck

State

PUBLISHED

Description

MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx. The FieldCc value is not properly sanitized when processed via a GET request and is reflected inside a