Description
MailEnable服务器V10之前的版本存在跨站点脚本 （XSS） 漏洞，允许远程攻击者通过 failure.aspx 组件执行任意代码
MailEnable-Failure.aspx页面存在反射XSS(CVE-2025-44148)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-44148
https://github.com/barisbaydur/CVE-2025-44148
https://www.mailenable.com/rss/article.asp?Source=RSSADMIN&ID=SECURITY1053
https://www.sentinelone.com/vulnerability-database/cve-2025-44148/
https://medium.com/@will.star/cve-2025-44148-cross-site-scripting-xss-vulnerability-on-a-small-business-f88f109262f6
https://support.plesk.com/hc/en-us/articles/33265762480023-XSS-vulnerability-CVE-2025-44148-in-MailEnable-in-Plesk-for-Windows
https://www.cve.org/CVERecord?id=CVE-2025-44148
https://ddpoc.com/DVB-2025-9433.html