CVE-2026-32851 | MailEnable up to 10.54 Webmail Interface FreeBusy.aspx Attendees cross site scripting

A vulnerability identified as problematic has been detected in MailEnable up to 10.54. This affects an unknown function of the file FreeBusy.aspx of the component Webmail Interface. The manipulation of the argument Attendees leads to cross site scripting.

This vulnerability is listed as CVE-2026-32851. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.