Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Easy Chat Server Project Clear all filters
TI-2024-00640 CVE-2024-0695 · GHSA-2h63-m6jf-2cm7

EFS Easy Chat Server HTTP GET Request denial of service

Priority MEDIUM 63

A vulnerability, which was classified as problematic, has been found in EFS Easy Chat Server 3.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00969 Published 2024-01-18 No fix listed CWE-404
TI-2023-04150 CVE-2023-4497 · GHSA-j827-c7gh-xmmj

Easy Chat Server XSS vulnerability

Priority LOW 28

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Icon param…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-04 No fix listed CWE-79
TI-2023-04149 CVE-2023-4496 · GHSA-vghr-xgqc-8gpm

Easy Chat Server XSS vulnerability

Priority LOW 28

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /body2.ghp (POST method), in the mtowho parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-04 No fix listed CWE-79
TI-2023-04148 CVE-2023-4495 · GHSA-2hpg-33j4-xvq2

Easy Chat Server XSS vulnerability

Priority LOW 28

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume par…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-04 No fix listed CWE-79