High severity7.2NVD Advisory· Published Jan 13, 2026· Updated Apr 15, 2026

CVE-2022-50908

Description

Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mailhog/Mailhogreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.0.1

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/50971nvd
www.shodan.io/searchnvd
www.vulncheck.com/advisories/mailhog-stored-cross-site-scripting-xssnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000