CVE-2025-10869 in Chatbot
Сводка (Английский)
Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user, through /Data/SaveInteractions.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Ответственный
INCIBE
Резервировать
23.09.2025
Раскрытие
15.10.2025
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 328660 | Oct8ne Chatbot межсайтовый скриптинг | 79 | Не определено | Не определено | CVE-2025-10869 |