CVE-2011-5297

no score yetEPSS 1.0%

Multiple cross-site scripting (XSS) vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter to default.php or (2) the username parameter to chat_form.php.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2015-01-01
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ttfreeware:tigertoms_chat_room

References

https://www.htbridge.com/advisory/HTB22996
https://www.htbridge.com/advisory/HTB22996

Check your stack JSON