PT-2025-50144
CVE-2025-34406
·
Published
2025-12-09
·
Updated
2026-10-18
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MailEnable versions prior to 10.54
Description
The software contains a reflected cross-site scripting (XSS) issue in the
Id parameter of the /Mobile/ContactDetails.aspx endpoint. The Id value is not properly sanitized when processed via a GET request and is reflected within a
Recommendations
Update MailEnable to version 10.54 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾