CVE-2025-2150CWE-79

HGiga C&Cm@il - Stored Cross-Site Scripting

Medium · published March 10, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular privileges to send emails containing malicious JavaScript code, which will be executed in the recipient's browser when they view the email.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-03-10T07:12Z
EPSS history
Timeline
  • 10 MAR 07:12Z
    HGiga C&Cm@il - Stored Cross-Site Scripting
    cvelistv5