Beveiligingsadvies

CVE-2021-45822

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-16 15:26:46
Laatst bijgewerkt 2024-08-04 04:54:30
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" (POST) parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code.