Security Advisory

CVE-2021-45822

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-16 15:26:46
Last updated 2024-08-04 04:54:30
Assigner mitre
State PUBLISHED

Description

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" (POST) parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code.