Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-58115 EUVD-2025-34737GHSA-xwvc-cvqg-crhc

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web …

Published Oct 16, 2025 · Updated Oct 16, 2025 · Assigned by jpcert

Vendor: NEOJAPAN Product: ChatLuck

Description

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.

Affected products

VendorProductAffectedFixed
NEOJAPAN ChatLuck V3.6 R1.0 to V6.6 R1.0 —

References