| Package | Affected versions | Patched versions |
|---|---|---|
| mdaemon | = 8.1.3 | |
| worldclient | = 8.1.3 |
WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free