High severity7.2NVD Advisory· Published Jan 13, 2026· Updated Apr 15, 2026

CVE-2022-50908

Description

Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.

Affected products

Mailhog/Mailhogreferences

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploit-db.com/exploits/50971nvd
www.shodan.io/searchnvd
www.vulncheck.com/advisories/mailhog-stored-cross-site-scripting-xssnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000