CVE-2022-50908
Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
Summary
Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
Original description
The description as published by the source.
Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web shodan.io