CVE-2022-38481: Mega Hopex

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP2. The application is prone to reflected Cross-site Scripting (XSS) in several features.

Affected products

• Mega Hopex: version 15.2.0.6110 only

Published 2023-01-10. Last modified 2026-06-17.