CVE-2025-44148

Severe 9.8

Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component

Published June 3, 2025.