Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-9141 EUVD-2024-49753GHSA-wvhj-f7hf-4qv2

Cross-Site Scripting (XSS) vulnerability in Oct8ne

Published Sep 24, 2024 · Updated Sep 24, 2024 · Assigned by INCIBE

Description

Cross-Site Scripting (XSS) vulnerability in the Oct8ne system. This flaw could allow an attacker to embed harmful JavaScript code into the body of a chat message. This manipulation occurs when the chat content is intercepted and altered, leading to the execution of the JavaScript payload.

Affected products

VendorProductAffectedFixed
Oct8ne Oct8ne all versions —

References