High (7.5) in otr gajim-otr. EPSS 3.1% chance of exploitation in the next 30 days.
The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors.
Severity
CVSS 3.0
7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-11-01)