CVE-2018-20370

MEDIUM 5.4CVE-2018-20370 · Published 23/12/2018 · updated 17/06/2026

In short

CVE-2018-20370 is a MEDIUM (CVSS 5.4) vulnerability affecting netchat (the-sz).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.1% of all vulnerabilities.
Fix: update to 7.9 or later.

Package	Affected versions	Patched versions
netchat the-sz	`< 7.9`	`7.9`

Description

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.

References

vulnerability-lab.com/get_content.php · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free