Skip to main content

Convos

4 CVEs product

Monthly

CVE-2022-21650 MEDIUM POC PATCH This Month

Convos is an open source multi-user chat that runs in a web browser. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Convos
NVD GitHub
CVSS 3.1
5.4
EPSS
0.8%
CVE-2022-21649 MEDIUM POC PATCH This Month

Convos is an open source multi-user chat that runs in a web browser. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Convos
NVD GitHub
CVSS 3.1
5.4
EPSS
0.9%
CVE-2021-42584 MEDIUM POC PATCH This Month

A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Convos
NVD GitHub
CVSS 3.1
5.4
EPSS
0.7%
CVE-2020-14423 MEDIUM PATCH This Month

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Convos
NVD GitHub
CVSS 3.1
5.3
EPSS
1.1%
EPSS 1% CVSS 5.4
MEDIUM POC PATCH This Month

Convos is an open source multi-user chat that runs in a web browser. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Convos
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM POC PATCH This Month

Convos is an open source multi-user chat that runs in a web browser. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Convos
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM POC PATCH This Month

A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Convos
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Convos
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy