Record summary

CVE-2014-5276 has a selected CVSS score of 3.5; EIP currently links 1 catalogued exploit.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBPro Chat Rooms 8.2.0 - Multiple VulnerabilitiesExploitDB exploitby Mike ManzottiNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB

PoC details

References

6