Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-84073
HistoryMar 17, 2022 - 12:00 a.m.

Xbtit Cross-Site Scripting Vulnerability

2022-03-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

34.6%

Xbtit is a tracker software. A cross-site scripting vulnerability exists in Xbtit version 3.1. The vulnerability occurs when /ajaxchat/sendChatData.php fails to properly validate the value of the ā€œnā€ (POST) parameter. An attacker could exploit this vulnerability to execute malicious JavaScript code.

CPENameOperatorVersion
xbtit xbtiteq3.1

0.001 Low

EPSS

Percentile

34.6%

Related for CNVD-2022-84073