Most recent entries from all

EUVD-2026-255237

fkie_cve-2025-53858

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

GHSA-58f5-cq94-jm2j

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

jvndb-2025-000076

ChatLuck provided by NEOJAPAN Inc. contains multiple vulnerabilities listed below. <ul><li>Cross-site scripting vulnerability in Chat Rooms (CWE-79) - CVE-2025-53858</li> <li>Insufficient granularity of access control vulnerability in Invitation of Guest Users (CWE-1220) - CVE-2025-54461</li> <li>Cross-site scripting vulnerability in Guest User Sign-up (CWE-79) - CVE-2025-58115</li></ul> Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.