CVE-2026-32852 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbit…
Medium CVSS: 5.1

CVE-2026-32852

MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a malicious URL. Attackers can inject malicious code through the StartDate parameter in the FreeBusy.aspx form, which is not properly sanitized before being embedded into dynamically generated JavaScript.
Vendor
Mailenable
Product
Mailenable
CWE
CWE-79
Yayın Tarihi
2026-03-23 20:16:27
Güncelleme
2026-03-30 14:29:09
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-79 Mailenable MEDIUM Mailenable 2026

Referanslar

https://karmainsecurity.com/KIS-2026-05 https://mailenable.com/Standard-ReleaseNotes.txt https://www.mailenable.com/ https://www.mailenable.com/rss/article.asp?Source=RSSADMIN&ID=MAILENABLEVERSION1055 https://www.vulncheck.com/advisories/mailenable-reflected-xss-via-freebusy-aspx-startdate-parameter