PT-2024-35785 · Unknown · Lafelabs Chaos

Name of the Vulnerable Software and Affected Versions: LafeLabs Chaos version 0.0.1 Description: A cross-site scripting XSS issue exists in the "/scroll.php" endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. This could potentially lead to unauthorized...