CVE-2025-2150: Hgiga C&cm@il

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular privileges to send emails containing malicious JavaScript code, which will be executed in the recipient's browser when they view the email.

Affected products

• Hgiga C&cm@il: affected versions not specified

Published 2025-03-10. Last modified 2026-06-17.