CVE-2021-27182

2021-04-1422:29:59

mitre

www.cve.org

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user.