Cross-site scripting (XSS) vulnerability in info.php in flashChat 4.7.8 allows remote malicious users to inject arbitrary web script or HTML via a channel title (aka room name) that is not properly handled by the "who's online" feature.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
darrens 5-dollar script archive flashchat 4.7.8 |