CVE-2011-5297

2015-01-0111:00:00

mitre

www.cve.org

ttchat

1.0.4

xss

vulnerabilities

remote attackers

web script

html

msg parameter

default.php

username parameter

chat_form.php

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

50.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter to default.php or (2) the username parameter to chat_form.php.

References

www.htbridge.com/advisory/HTB22996