CVE-2018-20370

EUVD-2018-12928
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
the-sznetchat
𝑥
< 7.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.vulnerability-lab.com/get_content.php?id=2171
https://www.vulnerability-lab.com/get_content.php?id=2171