https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:18:32.171849+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255235 EUVD-2026-255235 2026-10-09T02:18:32.232448+00:00 EUVD-2026-255235 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58115 fkie_cve-2025-58115 2026-10-09T02:18:32.232486+00:00

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

 https://cve.radiocsirt.org/vuln/ghsa-xwvc-cvqg-crhc GHSA-xwvc-cvqg-crhc 2026-10-09T02:18:32.232529+00:00

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000076 jvndb-2025-000076 2026-10-09T02:18:32.232545+00:00

ChatLuck provided by NEOJAPAN Inc. contains multiple vulnerabilities listed below. <ul><li>Cross-site scripting vulnerability in Chat Rooms (CWE-79) - CVE-2025-53858</li> <li>Insufficient granularity of access control vulnerability in Invitation of Guest Users (CWE-1220) - CVE-2025-54461</li> <li>Cross-site scripting vulnerability in Guest User Sign-up (CWE-79) - CVE-2025-58115</li></ul> Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.