TI-2022-04493 CVE-2022-4902 · GHSA-c8jx-wgmp-xj28
eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting
Priority LOW 28
A vulnerability classified as problematic has been found in eXo Chat Application.
4 records
A vulnerability classified as problematic has been found in eXo Chat Application.
SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action.
Cross-site scripting (XSS) vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a user profile, possibly the (1) name and (2) website parameters to registe…
SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.