← CVE Intelligence

CVE-2021-44163

Chain Sea Information Integration Co., Ltd ai chatbot system - Reflected XSS PUBLISHED

Description (CNA)

Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attacker to perform JavaScript injection for XSS (reflected Cross-site scripting) attack without authentication.

Affected (CNA)

Vendor / productVersions
Chain Sea Information Integration Co., Ltd / ai chatbot systemunknown 0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.