Read the docs

Chatengine Project

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Chatengine Project records in CISA KEV

No Chatengine Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chatengine 7 records HIGH

Records

7 records in Chatengine · all components

TI-2023-14221 CVE-2023-30319 · GHSA-4fr8-gmqr-2fwp

Cross Site Scripting (XSS) vulnerability in username field in…

Priority HIGH 76

Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00888 Published 2023-07-06 No fix listed CWE-79
TI-2023-14223 CVE-2023-30321 · GHSA-w663-c34c-q8hv

Cross Site Scripting (XSS) vulnerability in textMessage field in…

Priority MEDIUM 43

Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00939 Published 2023-07-06 No fix listed CWE-79
TI-2023-14222 CVE-2023-30320 · GHSA-gqf7-xh28-qhmw

Cross Site Scripting (XSS) vulnerability in textMessage field in…

Priority MEDIUM 43

Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00939 Published 2023-07-06 No fix listed CWE-79
TI-2023-14227 CVE-2023-30326 · GHSA-qr6r-mxm9-5279

Cross Site Scripting (XSS) vulnerability in username field in…

Priority LOW 27

Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2023-07-06 No fix listed CWE-79
TI-2023-14224 CVE-2023-30322 · GHSA-87r8-h45f-65q2

Cross Site Scripting (XSS) vulnerability in username field in…

Priority LOW 25

Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00373 Published 2023-07-06 No fix listed CWE-79
Open these records in search →