CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Micro.Company Form to Chat App allows Stored XSS.This issue affects Form to Chat App: from n/a through 1.1.6.
Explanation of Vulnerability in Simple Terms
Form to Chat App versions up to 1.1.6 contain a cross-site scripting (XSS) vulnerability that allows an attacker to inject malicious scripts. An authenticated user must visit a crafted link or page for the attack to succeed. The vulnerability can affect other users and compromise site integrity. Update to a version newer than 1.1.6.
What an attacker can do
Inject malicious scripts that execute in other users' browsers when they visit the app.
Potential impact on your site
Users' sessions and data could be compromised if they click attacker-controlled links within the app.
Conditions required to exploit
Attacker must have a low-privilege account and trick a user into visiting a malicious link.
Key dates
External resources
Related vulnerabilities
