tiagorlampert CHAOS vulnerable to Cross Site Scripting

Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component...

CVE-2024-31839

The tiagorlampert CHAOS remote administration tool (v.5.0.1) contains a Cross-Site Scripting (XSS) vulnerability in the handler.go component's sendCommandHandler function. A remote attacker can exploit this to execute malicious scripts in a user's browser, potentially leading to privilege escalat...