CVE-2023-30326

MEDIO 6.1CVE-2023-30326 · Published 06/07/2023 · updated 17/06/2026

En resumen

CVE-2023-30326 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a chatengine (chatengine project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.40%, mayor que el 33.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
chatengine chatengine_project	`= 1.0`	No fix yet

Description

Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

References

wliang6/ChatEngine · Product
payatu.com/advisory/cross-site-scripting-vulnerability-in-username-field-in-chatbox-functionality-in-chatengine-1-0 · Third Party Advisory

Más vulnerabilidades de chatengine

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

chatengine

chatengine_project

= 1.0

No fix yet

Más vulnerabilidades de chatengine

Ver todo →