CVE-2024-13019: code-projects Chat System Chat Room Page update_room.php cross site scripting

Severity: medium (CVSS 4.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-29 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/update_room.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely.

Affected products

code-projects Chat System: 1.0

References

https://code-projects.org/
https://vuldb.com/?ctiid.289710
https://vuldb.com/?id.289710
https://vuldb.com/?submit.470599
https://code-projects.org/chat-system-using-php-source-code/

Get alerted when CVE-2024-13019 or the next vulnerability affects your stack