Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-29467 EUVD-2021-16078

Self-XSS

Published Apr 22, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a patch exists in version 2.4.1.

Affected products

VendorProductAffectedFixed
birb-digital wrongthink < 2.4.1 —

References