CVE-2023-30319

ChatEngine (Java web app) is affected by a cross-site scripting (XSS) vulnerability in the username field of /src/chatbotapp/LoginServlet.java, observed in commit fded8e710ad59f816867ad47d7fc4862f6502f3e. The issue allows arbitrary code execution as described in multiple sources referencing CVE-2...

CVE-2023-30320

CVE-2023-30320 describes a Cross Site Scripting (XSS) in the wliang6 ChatEngine. Affected component: textMessage field in /src/chatbotapp/chatWindow.java (commit fded8e710ad59f816867ad47d7fc4862f6502f3e). The vulnerability allows attackers to execute arbitrary code. CVSSv3.1 score is 9.0 (CRITICA...

CVE-2023-30321

The CVE-2023-30321 entry concerns a Cross-Site Scripting (XSS) vulnerability in the wliang6 ChatEngine, specifically in the textMessage field of /src/chatbotapp/LoginServlet.java (commit fded8e710ad59f816867ad47d7fc4862f6502f3e). The underlying issue is insufficient input sanitization in the Logi...