CVE-2025-34425 | MailEnable up to 10.53 compose.aspx ProcessContextSwitchResult WindowContext cross site scripting

A vulnerability categorized as problematic has been discovered in MailEnable up to 10.53. This affects the function ProcessContextSwitchResult of the file /Mondo/lang/sys/Forms/MAI/compose.aspx. The manipulation of the argument WindowContext results in cross site scripting.

This vulnerability is cataloged as CVE-2025-34425. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.