https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:20:44.632505+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255237 EUVD-2026-255237 2026-10-09T02:20:44.635083+00:00 EUVD-2026-255237 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53858 fkie_cve-2025-53858 2026-10-09T02:20:44.635115+00:00

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

 https://cve.radiocsirt.org/vuln/ghsa-58f5-cq94-jm2j GHSA-58f5-cq94-jm2j 2026-10-09T02:20:44.635145+00:00

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000076 jvndb-2025-000076 2026-10-09T02:20:44.635160+00:00

ChatLuck provided by NEOJAPAN Inc. contains multiple vulnerabilities listed below. <ul><li>Cross-site scripting vulnerability in Chat Rooms (CWE-79) - CVE-2025-53858</li> <li>Insufficient granularity of access control vulnerability in Invitation of Guest Users (CWE-1220) - CVE-2025-54461</li> <li>Cross-site scripting vulnerability in Guest User Sign-up (CWE-79) - CVE-2025-58115</li></ul> Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.