Lucene search
K

21 matches found

OSV
OSV
added 2025/10/22 9:15 a.m.0 views

CVE-2025-11952

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

6.1CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2025/10/22 9:15 a.m.2 views

CVE-2025-11952

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

6.1CVSS0.00025EPSS
Exploits0References1
CVE
CVE
added 2025/10/22 8:22 a.m.4 views

CVE-2025-11952

CVE-2025-11952 describes a stored XSS in Oct8ne Chatbot v2.3. The flaw arises from input validation failure when creating a mail transcript via /Records/SendSummaryMail, allowing injected JavaScript to run in a victim's browser. Impact stated: potential theft of sensitive data (e.g., session cook...

6.1CVSS5.9AI score0.00025EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/22 8:22 a.m.2 views

EUVD-2025-35339

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

5.3CVSS5.8AI score0.00025EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/22 8:22 a.m.2 views

CVE-2025-11952 Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

5.3CVSS5.9AI score0.00025EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/22 8:22 a.m.4 views

CVE-2025-11952 Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

5.3CVSS0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.3 views

Oct8ne Chatbot 跨站脚本漏洞

Oct8ne Chatbot is a chatbot from Oct8ne, Inc. A cross-site scripting vulnerability exists in Oct8ne Chatbot version 2.3, which stems from failure to validate input when creating a mail record via /Records/SendSummaryMail, which could lead to a stored cross-site scripting attack...

6.1CVSS6AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2025/10/15 1:16 p.m.1 views

CVE-2025-10869

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

6.1CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2025/10/15 1:16 p.m.2 views

CVE-2025-10869

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

6.1CVSS0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/15 12:37 p.m.2 views

EUVD-2025-34610

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

5.3CVSS5.8AI score0.00025EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/15 12:37 p.m.2 views

CVE-2025-10869 Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

5.3CVSS5.9AI score0.00025EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/15 12:37 p.m.4 views

CVE-2025-10869 Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot

Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...

5.3CVSS0.00025EPSS
Exploits0References1
CVE
CVE
added 2025/10/15 12:37 p.m.3 views

CVE-2025-10869

CVE-2025-10869 describes a Stored Cross-site Scripting (XSS) vulnerability in Oct8ne Chatbot v2.3. The issue allows an attacker to inject JavaScript via a transcript created for an email-sent interaction, executed in the victim’s browser. The attack surface includes the /Data/SaveInteractions flo...

6.1CVSS5.9AI score0.00025EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.2 views

Oct8ne Chatbot 跨站脚本漏洞

Oct8ne Chatbot is a chatbot from Oct8ne. A cross-site scripting vulnerability exists in Oct8ne Chatbot version v2.3, which stems from stored cross-site scripting and could lead to an attacker executing JavaScript code in the victim's browser...

6.1CVSS6.1AI score0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-49753

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00154EPSS
Exploits0References1
NVD
NVD
added 2024/09/25 1:15 a.m.11 views

CVE-2024-9141

Cross-Site Scripting XSS vulnerability in the Oct8ne system. This flaw could allow an attacker to embed harmful JavaScript code into the body of a chat message. This manipulation occurs when the chat content is intercepted and altered, leading to the execution of the JavaScript payload...

5.4CVSS0.00154EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/09/25 12:0 a.m.1 views

Oct8ne 跨站脚本漏洞

Oct8ne is an online chat software from Oct8ne, Inc. Oct8ne suffers from a cross-site scripting vulnerability that originates from chat content that, when intercepted and modified, could allow an attacker to embed harmful JavaScript code into chat messages, resulting in JavaScript code execution...

5.4CVSS6.5AI score0.00154EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/24 10:50 a.m.16 views

CVE-2024-9141 Cross-Site Scripting (XSS) vulnerability in Oct8ne

Cross-Site Scripting XSS vulnerability in the Oct8ne system. This flaw could allow an attacker to embed harmful JavaScript code into the body of a chat message. This manipulation occurs when the chat content is intercepted and altered, leading to the execution of the JavaScript payload...

5.4CVSS0.00154EPSS
Exploits0References1
CVE
CVE
added 2024/09/24 10:50 a.m.53 views

CVE-2024-9141

CVE-2024-9141 describes a Cross-Site Scripting (XSS) vulnerability in Oct8ne, where attacker-controlled chat content could be manipulated (intercepted/altered) to execute JavaScript in chat messages. Affected product: Oct8ne chat system. Underlying cause and exact vulnerable component are not exp...

5.4CVSS5.3AI score0.00154EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/24 10:50 a.m.10 views

CVE-2024-9141 Cross-Site Scripting (XSS) vulnerability in Oct8ne

Cross-Site Scripting XSS vulnerability in the Oct8ne system. This flaw could allow an attacker to embed harmful JavaScript code into the body of a chat message. This manipulation occurs when the chat content is intercepted and altered, leading to the execution of the JavaScript payload...

5.4CVSS5.9AI score0.00154EPSS
Exploits0References1
Rows per page
Query Builder