CVE-2025-58115 MEDIUM

CVE-2025-58115

Vendor Neojapan Inc.

Product ChatLuck

Weakness CWE-79 · XSS

Published October 16, 2025

Last update October 16, 2025

View on NVD All CVEs

CVSS base score

6.1/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

Key dates

02Disclosure timeline

October 16, 2025 CVE published

October 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-58115 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2023-1315 Cross-site Scripting (XSS) - Reflected in osticket/osticket CVE-2025-9716 O2OA Personal Profile form cross site scripting CVE-2026-10289 code-projects Hotel and Tourism Reservation System tour.php cross site scripting CVE-2024-53274 GHSL-2024-111: Reflected XSS in /home in habitica CVE-2026-58031 Stored i18n XSS in Special:ApiSandbox when a deprecated module is selected