medium5.4
CVE-2018-20370
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module.
Impact
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| The-Sz | Netchat | before 7.9 |