← Back to CVE List
CVE-2018-20370
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt