TI-2020-13234 CVE-2020-17476 · GHSA-cm54-w897-v424
Mibew Messenger before 3.2.7 allows XSS via a crafted user name.
Priority LOW 28
Mibew Messenger before 3.2.7 allows XSS via a crafted user name.
No Mibew vulnerabilities are listed in CISA KEV.
2 records
Mibew Messenger before 3.2.7 allows XSS via a crafted user name.
Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting (XSS) sequenc…