CVE-2025-2150

—

CVSS 3.1

5.4 medium

EPSS

<1%p17

Published

Mar 10, 2025 (Mar 10, 2025)

Modified

Jun 17, 2026

Description

The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular privileges to send emails containing malicious JavaScript code, which will be executed in the recipient's browser when they view the email.

Vendors: hgiga
Products: c\&cm\@il
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.