Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.6 views

CVE-2026-25144

Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6...

5.3CVSS5.3AI score0.00251EPSS
Exploits0References1
NVD
NVD
added 2026/02/02 11:16 p.m.7 views

CVE-2026-25144

Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6...

5.3CVSS0.00251EPSS
Exploits0References2
CVE
CVE
added 2026/02/02 10:54 p.m.11 views

CVE-2026-25144

CVE-2026-25144 affects Talishar’s in-game chat system. A Stored XSS vulnerability exists where the playerID parameter in SubmitChat.php is saved without sanitization and may be executed when a user views the current game page. The issue is publicly documented across multiple sources (NVD/Red Hat/...

5.3CVSS5.3AI score0.00251EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/02 10:54 p.m.25 views

CVE-2026-25144 Talishar has a Stored XSS which can lead to data exfiltration & user impersonation

Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6...

5.3CVSS0.00251EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/02 10:54 p.m.6 views

CVE-2026-25144

Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6...

5.3CVSS5.3AI score0.00251EPSS
Exploits0References3
OSV
OSV
added 2026/02/02 10:54 p.m.5 views

CVE-2026-25144 Talishar has a Stored XSS which can lead to data exfiltration & user impersonation

Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6...

5.3CVSS5.3AI score0.00251EPSS
Exploits0References4
Rows per page
Query Builder