Vulnerabilities

TI-2022-06027 CVE-2022-21649

Stored XSS via attribute in convos

HIGH 66

Convos is an open source multi-user chat that runs in a web browser.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00963 Published 2022-01-04 Fixed in 6.52 CWE-79

TI-2022-06028 CVE-2022-21650

HIGH 66

Convos is an open source multi-user chat that runs in a web browser.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00858 Published 2022-01-04 Fixed in 6.52 CWE-79

TI-2021-18861 CVE-2021-42584 · GHSA-r3x3-fwhm-94p7

LOW 26

A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00754 Published 2021-12-17 No fix listed CWE-79

TI-2020-11284 CVE-2020-14423 · GHSA-92jv-wxcr-6fgw

LOW 26

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01059 Published 2020-06-18 No fix listed CWE-330