An Authenticated Reflected Cross-site scripting at BCC Parameter exists in MDaemon prior to 22.0.0 .
altn mdaemon