← Database

CVE-2021-45822

MEDIUM CVSS: 6.1 Published: 2022-03-16 Modified: 2026-06-17

Description

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" (POST) parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code.

Affected Platforms

Btiteam Xbtit

Weakness Type

CWE-79

References