Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attack

BROWSER

13-01-2026 23:30

CVE-2022-50908 Vulnerabilidad documentada

Sin puntuación

Tags

#xss

#site

#cross

#cross-site

#browser

#vulnerability

#cross-site scripting

#deletion

#attackers

#arbitrary

#scripting

#malicious

#inject

#execute

#allow

#attack

Descripción

Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads execute arbitrary API calls, including message deletion and browser manipulation.

https://github.com/mailhog/MailHog

https://www.exploit-db.com/exploits/50971

https://www.shodan.io/search?query=mailhog

https://www.vulncheck.com/advisories/mailhog-stored-cross-site-scripting-xss

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2022-50908

Resultados similares

Coincidentes en almenos en 50% de los tags

14-01-2026
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited Microsoft on ...
Ver información

13-01-2026 CVE-2023-53985
Zstore, now referred to as Zippy CRM, 6.5.4 contains a reflected cross-site scripting vulnerabi...
Ver información