Security Advisory
CVE-2014-5276
3.5
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.
Published Date
October 20, 2014
Official Source
NIST NVD Advisory