CVE-2025-2150mediumCWE-79

CVE-2025-2150: medium-severity vulnerability in HGiga C&Cm@il

HGiga C&Cm@il - Stored Cross-Site Scripting

Published

Follow this CVE+ Monitor C&Cm@il

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.3%
The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular privileges to send emails containing malicious JavaScript code, which will be executed in the recipient's browser when they view the email.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
HGiga · C&Cm@il