CVE-2025-44148
Critical · CVSS 9.8MailEnable — Cross-Site Scripting (XSS)
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- other
- CWE-79
Description
Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component
Search profile — drives PoC discovery
Symbols failure.aspxMailEnableCVE-2025-44148
Keywords CVE-2025-44148MailEnable XSSfailure.aspx XSSMailEnable before v10MailEnable cross site scriptingbarisbaydur CVE-2025-44148
Versions: before v10
Ranked PoCs (5) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 3
- ★ 0PuddinCat/GithubRepoSpider needs reviewtrickest
- ★ 0hsamnguyen/lastest-update-bounty needs reviewtrickest
- ★ 0kk12-30/2025hvv needs reviewtrickest
- ★ 0zhanpengliu-tencent/medium-cve needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T00:30:39.000Z