Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-53858 1 Neojapan 1 Chatluck 2025-10-21 N/A
ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.
CVE-2025-58115 1 Neojapan 1 Chatluck 2025-10-21 N/A
ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.
CVE-2025-54461 1 Neojapan 1 Chatluck 2025-10-21 N/A
ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user.