CVE-2023-44272
Published Oct 4, 2023A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed…
Vendor/product archive
2 CVEs tagged to citadel / citadel — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed…
modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory…