2 matches found
CVE-2019-25262: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in elinicksic Razgover up to db37dfc5c82f023a40f2f7834ded6633fb2b5262. This affects an unknown part of the file Chattify/send.php of the component Chat Message Handler. Such manipulation of the argument msg leads to cross site scripting. The attack may b...
5.1CVSS3.5AI score0.00283EPSS
SaveExploits0References1
Razgover 代码注入漏洞
Razgover is an online messaging application by Eli Nicksic Personal Developer. Razgover suffers from a code injection vulnerability that stems from incorrect manipulation of the parameter msg in the file Chattify/send.php, which could lead to a cross-site scripting attack...
5.1CVSS4.8AI score0.00283EPSS
SaveExploits0References3
20