Read the docs

Easy Chat Server Project

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Easy Chat Server Project records in CISA KEV

No Easy Chat Server Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 63

A vulnerability, which was classified as problematic, has been found in EFS Easy Chat Server 3.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00969 Published 2024-01-18 No fix listed CWE-404
TI-2023-04150 CVE-2023-4497 · GHSA-j827-c7gh-xmmj

Easy Chat Server XSS vulnerability

Priority LOW 28

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Icon param…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-04 No fix listed CWE-79
TI-2023-04149 CVE-2023-4496 · GHSA-vghr-xgqc-8gpm

Easy Chat Server XSS vulnerability

Priority LOW 28

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /body2.ghp (POST method), in the mtowho parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-04 No fix listed CWE-79
TI-2023-04148 CVE-2023-4495 · GHSA-2hpg-33j4-xvq2

Easy Chat Server XSS vulnerability

Priority LOW 28

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume par…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-04 No fix listed CWE-79
Open these records in search →