Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Chatengine Project Clear all filters
TI-2023-14227 CVE-2023-30326 · GHSA-qr6r-mxm9-5279

Cross Site Scripting (XSS) vulnerability in username field in…

Priority LOW 27

Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2023-07-06 No fix listed CWE-79
TI-2023-14224 CVE-2023-30322 · GHSA-87r8-h45f-65q2

Cross Site Scripting (XSS) vulnerability in username field in…

Priority LOW 25

Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00373 Published 2023-07-06 No fix listed CWE-79
TI-2023-14223 CVE-2023-30321 · GHSA-w663-c34c-q8hv

Cross Site Scripting (XSS) vulnerability in textMessage field in…

Priority MEDIUM 43

Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00939 Published 2023-07-06 No fix listed CWE-79
TI-2023-14222 CVE-2023-30320 · GHSA-gqf7-xh28-qhmw

Cross Site Scripting (XSS) vulnerability in textMessage field in…

Priority MEDIUM 43

Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00939 Published 2023-07-06 No fix listed CWE-79
TI-2023-14221 CVE-2023-30319 · GHSA-4fr8-gmqr-2fwp

Cross Site Scripting (XSS) vulnerability in username field in…

Priority HIGH 76

Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00888 Published 2023-07-06 No fix listed CWE-79