CVE-2021-45822

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" POST parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code...

PT-2022-12422

Name of the Vulnerable Software and Affected Versions Xbtit version 3.1 Description A cross-site scripting issue is present due to improper validation of the n parameter in the "/ajaxchat/sendChatData.php" API endpoint. This allows an attacker to execute malicious JavaScript code. Recommendations...