{"id":"CVE-2024-11182","aliases":[],"url":"https://o3.security/vulnerability/CVE-2024-11182","summary":"An XSS issue was discovered in \n\nMDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message \nwith \nJavaScript in an img tag. This could\n allow a remote…","details":"An XSS issue was discovered in \n\nMDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message \nwith \nJavaScript in an img tag. This could\n allow a remote attacker\n\nto load arbitrary JavaScript code in the context of a webmail user's browser window.","published":"2024-11-15T10:43:10.960Z","modified":"2025-10-21T22:55:36.394Z","cvss":null,"epss":{"score":0.17105,"percentile":0.96816,"asOf":"2026-08-18"},"cisaKev":{"dateAdded":"2025-05-19","dueDate":"2025-06-09","knownRansomwareCampaignUse":false},"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11182"}],"provenance":{"sources":["OSV.dev","NVD","CISA KEV","FIRST.org (EPSS)"],"lastVerified":"2025-10-21T22:55:36.394Z"}}