Lucene search
PRIOn knowledge basePRION:CVE-2023-4495HistoryOct 04, 2023 - 1:15 p.m.
Cross site scripting
2023-10-0413:15:00
PRIOn knowledge base
www.prio-n.com
6
easy chat server
version 3.1
cross-site scripting
xss vulnerability
user-controlled inputs
post method
resume parameter
/registresult.htm
/register.ghp
nvd
0.0005 Low
EPSS
Percentile
17.1%
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume parameter. The XSS is loaded from /register.ghp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| easy_chat_server | le | 3.1 |
Related
cvelist
cvelist
CVE-2023-4495 Easy Chat Server XSS vulnerability
2023-10-04 12:29:05
cve
cve
CVE-2023-4495
2023-10-04 13:15:26
nvd
nvd
CVE-2023-4495
2023-10-04 13:15:26
packetstorm
packetstorm
Easy Address Book Web Server 1.6 Buffer Overflow / Cross Site Scripting
2023-08-31 00:00:00