CVE-2014-125089CWE-79

cention-chatserver InternalChatProtocol.fe _formatBody cross site scripting

Low · published February 21, 2023

CVSS v3.1
3.5
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

A vulnerability was found in cention-chatserver 3.8.0-rc1. It has been declared as problematic. Affected by this vulnerability is the function _formatBody of the file lib/InternalChatProtocol.fe. The manipulation of the argument body leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.9 is able to address this issue. The identifier of the patch is c4c0258bbd18f6915f97f91d5fee625384096a26. It is recommended to upgrade the affected component. The identifier VDB-221497 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-02-21T02:31Z
EPSS history
Timeline
  • 21 FEB 02:31Z
    cention-chatserver InternalChatProtocol.fe _formatBody cross site scripting
    cvelistv5