5.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.1%
Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php.
securitytracker.com/id?1013604
www.persianhacker.net/news/news-2946.html
www.securityfocus.com/archive/1/394526
www.securityfocus.com/bid/12929