tiagorlampert CHAOS vulnerable to Cross Site Scripting

Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component...

CVE-2024-31839

CVE-2024-31839 concerns a Cross-Site Scripting in tiagorlampert CHAOS v5.0.1 via the sendCommandHandler function (handler.go), enabling a remote attacker to escalate privileges. Nuclei templates confirm the XSS vector; a Metasploit module describes an XSS path that can lead to RCE in CHAOS-relate...