XSS in Mm Chat

CVE-2008-2973

Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sitename and (2) wmessage parameters.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.015 (71.8th percentile) — read the EPSS interpretation.

Affected products

  • Mm_chat — versions 1.5
  • N/a — versions n/a

Weakness classification (CWE)

References