CVE-2024-11182

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.

• CWE-79
• CWE-79

• https://files.mdaemon.com/mdaemon/beta/RelNotes_en.htmlRelease Notes
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11182US Government Resource

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11177Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-11178The Login With OTP plugin for WordPress is vulnerable to aut…8.1
• CVE-2024-11179The MStore API – Create Native Android & iOS Apps On The Clo…6.5
• CVE-2024-1118The Podlove Subscribe button plugin for WordPress is vulnera…8.8
• CVE-2024-11180The ElementsKit Elementor addons plugin for WordPress is vul…5.4
• CVE-2024-11181The Greenshift – animation and page builder blocks plugin fo…4.3
• CVE-2024-11183The Simple Side Tab WordPress plugin before 2.2.0 does not s…4.8
• CVE-2024-11184The wp-enable-svg WordPress plugin through 0.7 does not sani…4.8
• CVE-2024-11185On affected platforms running Arista EOS, ingress traffic on…6.5
• CVE-2024-11186On affected versions of the CloudVision Portal, improper acc…10
• CVE-2024-11187It is possible to construct a zone such that some queries to…7.5
• CVE-2024-11188The Formidable Forms – Contact Form Plugin, Survey, Quiz, Pa…6.1