CVE-2024-13019 — Cross-site Scripting in Chat System

CWE-79 — Cross-site ScriptingCWE-94 — Code Injection3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 67.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Code-projects Chat System
Timeline
PublishedDec 29

Description

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/update_room.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-43c2-phgp-56f4: A vulnerability classified as problematic has been found in code-projects Chat System 1↗2024-12-29
▶
CVEList
code-projects Chat System Chat Room Page update_room.php cross site scripting↗2024-12-29
▶
CVE-2024-13019 — Cross-site Scripting in Chat System | cvebase