CVE-2021-45822

2022-03-1615:26:46

mitre

www.cve.org

0.001 Low

EPSS

Percentile

34.6%

JSON

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the “n” (POST) parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code.