CVE-2021-27180

Name of the Vulnerable Software and Affected Versions: MDaemon versions prior to 20.0.4

Description: An issue was discovered in the Webmail component of MDaemon, also known as WorldClient. This issue is related to Reflected XSS, which can be exploited via a GET request. It allows an attacker to perform any action with the privileges of the attacked user.

Recommendations: For versions prior to 20.0.4, update to version 20.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Webmail component until the update is applied.