Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-53858 EUVD-2025-34741GHSA-58f5-cq94-jm2j

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser …

Published Oct 16, 2025 · Updated Oct 16, 2025 · Assigned by jpcert

Vendor: NEOJAPAN Product: ChatLuck

Description

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

Affected products

VendorProductAffectedFixed
NEOJAPAN ChatLuck V6.6 R2.0 and earlier —

References