CVE-2025-7951

CWE-79 — Cross-site Scripting (XSS)CWE-94 — Code Injection3 documents3 sources

Severity

5.1MEDIUM

EPSS

0.0%

top 85.91%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Code-projects Public Chat Room Fabian Public Chat Room

Timeline

PublishedJul 22

Description

A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0. This affects an unknown part of the file /send_message.php. The manipulation of the argument chat_msg/your_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5code-projects/public_chat_room1.0

▶NVDfabian/public_chat_room1.0

🔴Vulnerability Details

CVEList

code-projects Public Chat Room send_message.php cross site scripting↗2025-07-22

▶

GHSA

GHSA-6hrx-hjc5-v9mq: A vulnerability classified as problematic has been found in code-projects Public Chat Room 1↗2025-07-22

▶