HGiga C&Cm@il Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in HGiga's C&Cm@il application, specifically in versions of the MailK-mail package prior to 1.0-238. This vulnerability allows remote attackers with regular privileges to send emails containing malicious JavaScript. The injected script is executed in the browser of the recipient when the email is viewed.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the email.

Remediation

Users are advised to update the MailK-mail package to version 1.0-238 or later.