medium6.1
CVE-2021-27180
An issue was discovered in MDaemon before 20.0.4.
Impact
An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Altn | Mdaemon | before 20.0.4 |