CVE-2018-20370
23.12.2018, 02:29
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.
| Vendor | Product | Version |
|---|---|---|
| the-sz | netchat | 𝑥 < 7.9 |
𝑥
= Vulnerable software versions