← All advisories

Medium severity6.1NVD Advisory· Published Aug 10, 2020· Updated Jun 17, 2026

CVE-2020-17476

CVE-2020-17476

Description

Mibew Messenger before 3.2.7 allows XSS via a crafted user name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Mibew/Messenger2 versions
cpe:2.3:a:mibew:messenger:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mibew:messenger:*:*:*:*:*:*:*:*range: <3.2.7
- (no CPE)range: <3.2.7
Mibew/Messengerdescription
Mibew/mibewllm-create
Range: <3.2.7

Patches

Vulnerability mechanics

References

2

github.com/Mibew/mibew/commit/84f5bca0a90b2fe470e35e9b5121548ccce0093cnvdPatchThird Party Advisory
mibew.org/announcements/2020/07/09/mibew-messenger-3-2-7-has-been-releasednvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.