Lucene search
+L

7 matches found

CNVD
CNVD
•added 2022/03/17 12:00 a.m.•149 views

Xbtit Cross-Site Scripting Vulnerability

Xbtit is a tracker software. A cross-site scripting vulnerability exists in Xbtit version 3.1. The vulnerability occurs when /ajaxchat/sendChatData.php fails to properly validate the value of the "n" POST parameter. An attacker could exploit this vulnerability to execute malicious JavaScript code...

4.3CVSS5.9AI score0.01055EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2022/03/16 4:15 p.m.•12 views

CVE-2021-45822

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" POST parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code...

6.1CVSS5.8AI score0.01055EPSS
SaveExploits1References3
NVD
NVD
•added 2022/03/16 4:15 p.m.•47 views

CVE-2021-45822

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" POST parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code...

6.1CVSS0.01055EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/16 4:15 p.m.•27 views

Cross site scripting

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" POST parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code...

4.3CVSS5.8AI score0.01055EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2022/03/16 3:26 p.m.•2 views

CVE-2021-45822

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" POST parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code...

6.1CVSS0.01055EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/16 12:00 a.m.•9 views

CVE-2021-45822: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" POST parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code...

6.1CVSS6.5AI score0.01055EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/03/16 12:00 a.m.•1 views

PT-2022-12422

Name of the Vulnerable Software and Affected Versions Xbtit version 3.1 Description A cross-site scripting issue is present due to improper validation of the n parameter in the "/ajaxchat/sendChatData.php" API endpoint. This allows an attacker to execute malicious JavaScript code. Recommendations...

6.1CVSS6.1AI score0.01055EPSS
SaveExploits1References4
Rows per page
Query Builder