CVE-2025-53858

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

CVE-2025-58115

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

CVE-2025-54461

ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user...

CVE-2025-54461

ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user...

CVE-2025-58115

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

EUVD-2025-34737

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

CVE-2025-54461

CVE-2025-54461 affects ChatLuck. Affected component: the invitation flow for guest users. Root cause: insufficient granularity of access control that allows an uninvited guest to register as a guest user. Impact: potential unauthorized guest registrations (privacy/abuse risk) as described in mult...

CVE-2025-53858

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

CVE-2025-53858

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

CVE-2025-53858

CVE-2025-53858 affects ChatLuck, a ChatLuck product, with a cross-site scripting vulnerability in Chat Rooms that could allow arbitrary script execution in the web browser of a user accessing the product. The connected Red Hat, NVD, JVN, and CVE records corroborate the issue as a browser-executab...

ChatLuck 跨站脚本漏洞

ChatLuck is an enterprise internal and external communication software from the Japanese company ChatLuck. ChatLuck suffers from a cross-site scripting vulnerability that originates from a cross-site scripting vulnerability in guest user registration, which could lead to the execution of arbitrar...

ChatLuck 跨站脚本漏洞

ChatLuck is an enterprise internal and external communication software from the Japanese company ChatLuck. ChatLuck suffers from a cross-site scripting vulnerability that originates from a cross-site scripting vulnerability in ChatLuck, which could lead to the execution of arbitrary script in a...

PT-2025-42448

Name of the Vulnerable Software and Affected Versions ChatLuck affected versions not specified Description ChatLuck contains a cross-site scripting issue within its Chat Rooms functionality. Successful exploitation could allow an attacker to execute arbitrary scripts in a user's web browser...

PT-2025-42450

Name of the Vulnerable Software and Affected Versions ChatLuck affected versions not specified Description ChatLuck contains a cross-site scripting issue in the Guest User Sign-up functionality. Successful exploitation could allow an attacker to execute arbitrary scripts in the web browser of a...

ChatLuck 安全漏洞

ChatLuck is an enterprise internal and external communication software from ChatLuck Japan. A security vulnerability exists in ChatLuck that stems from insufficient access control granularity when inviting guest users, which could result in uninvited guest users registering as guest users...

CVE-2025-54461: Insufficient Granularity of Access Control

ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user...

PT-2025-42449

Name of the Vulnerable Software and Affected Versions ChatLuck affected versions not specified Description The software exhibits an issue with access control related to the invitation of guest users. An uninvited guest user may be able to register as a guest user if the issue is successfully...

CVE-2025-58115: Improper Neutralization of Input During Web Page Generation

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...

CVE-2025-53858: Improper Neutralization of Input During Web Page Generation

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product...