CVE-2025-34400 | MailEnable up to 10.53 AddressBook.aspx AddressesTo cross site scripting

December 9, 2025 Yanac

A vulnerability, which was classified as problematic, was found in MailEnable up to 10.53. The affected element is an unknown function of the file /Mondo/lang/sys/Forms/AddressBook.aspx. The manipulation of the argument AddressesTo results in cross site scripting.

This vulnerability is cataloged as CVE-2025-34400. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More