CVE-2014-5276

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

2.64% chance of exploitation in the next 30 days, 84th percentile

Published

2014-10-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/34275

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/34275

References

• CVE Record
• NVD entry

Related

• CVE-2014-5275
• CVE-2014-5284
• CVE-2014-5266
• CVE-2014-5287
• CVE-2014-5265
• CVE-2014-5288