This has been fixed. More information can be found in the first line in the 
MDaemon release notes:

[10385] fix to WorldClient HTML injection vulnerability

Reply via email to