← Database

CVE-2025-44148

CRITICAL CVSS: 9.8 Published: 2025-06-03 Modified: 2026-07-05

Description

Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component

Affected Platforms

Mailenable Mailenable

Weakness Type

CWE-79

References