CVE-2026-32852 | MailEnable up to 10.54 Webmail Interface FreeBusy.aspx StartDate cross site scripting

A vulnerability labeled as problematic has been found in MailEnable up to 10.54. This impacts an unknown function of the file FreeBusy.aspx of the component Webmail Interface. The manipulation of the argument StartDate results in cross site scripting.

This vulnerability is cataloged as CVE-2026-32852. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.