CVE-2020-18724

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes…

published February 3, 2021

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03191 · 88.0th percentile
Published
2021-02-03T17:27Z
EPSS history
Timeline
  • 03 FEB 17:27Z
    Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes…
    cvelistv5