CVE-2025-2150
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Mar 10, 2025
Updated: Mar 24, 2025
CWE ID 863
Summary
CVE-2025-2150 is a newly discovered Stored Cross-Site Scripting (XSS) vulnerability affecting the C&Cm@il email component from HGiga. This issue enables attackers with regular access to send malicious emails containing JavaScript code. When recipients open these emails in their browser, the scripts are executed, potentially leading to unauthorized access, data theft, or other malicious activities. This vulnerability poses a serious threat to email security and requires immediate attention and patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.