CVE-2022-50908

MEDIUM

Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-50908 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 14, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Mailhog

Browse Mailhog / Mailhog
CVE List1.0.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBMailhog 1.0.1 - Stored Cross-Site Scripting (XSS)ExploitDB exploitby VulnzNot analyzed1 file
ExploitDB
PoC details

References

5