Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-2150

HGiga C&Cm@il - Stored Cross-Site Scripting

Description

The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular privileges to send emails containing malicious JavaScript code, which will be executed in the recipient's browser when they view the email.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HGiga C&Cm@il

Default version status: unaffected

  • 0 to < 1.0-238affected

References