CVE-2025-4838

Vulnerability overview (CVE-2025-4838): Affected product: kanwangzjm Funiture (up to commit 71ca0fb0658b3d839d9e049ac36429207f05329b). The issue is in the Login component, specifically the LoginServlet.java file and its doPost function. The argument ret can be manipulated to induce an open redire...

PT-2023-22628

Name of the Vulnerable Software and Affected Versions wliang6 ChatEngine affected versions not specified Description A Cross Site Scripting XSS issue exists in the username field, located in /src/chatbotapp/LoginServlet.java, allowing attackers to execute arbitrary code. This issue is related to...

CVE-2023-30321: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30321

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30319: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30319

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...