CVE-2022-29976

An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0...

CVE-2022-29976

CVE-2022-29976 concerns an Authenticated Reflected Cross‑site Scripting in Alt‑N MDaemon prior to 22.0.0, arising from insufficient validation of user input in the BCC parameter. An attacker with access to MDaemon could trigger JavaScript execution in a victim’s browser. The CVSS data in the prov...