header-logo
Suggest Exploit
vendor:
BlastChat Client
by:
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: BlastChat Client
Affected Version From:
Affected Version To: BlastChat Client 3.3
Patch Exists: YES
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

Cross-Site Scripting Vulnerability in BlastChat Client

The BlastChat Client is prone to a cross-site scripting vulnerability due to improper input sanitization. An attacker can exploit this vulnerability to execute arbitrary script code in the browser of a victim user, potentially stealing their authentication credentials and launching further attacks.

Mitigation:

To mitigate this vulnerability, it is recommended to update to BlastChat Client version 3.4 or later. Additionally, input validation and sanitization should be implemented to prevent XSS attacks.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/42734/info

BlastChat Client is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to BlastChat Client 3.4 are vulnerable. 

http://www.example.com/index.php?option=com_blastchatc&Itemid=" onload="alert(/XSS/)"

Navigation

Suggest Exploit

Services By CQR