CVE-2019-19497

CVE-2019-19497

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.

Source: CVE-2019-19497