Medium severity6.1NVD Advisory· Published Jul 6, 2023· Updated Jun 17, 2026

CVE-2023-30326

Description

Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

wliang6/ChatEnginedescription
Wliang6/ChatEnginellm-create
Payatu/ChatEnginellm-fuzzy

Patches

Vulnerability mechanics

References

payatu.com/advisory/cross-site-scripting-vulnerability-in-username-field-in-chatbox-functionality-in-chatengine-1-0/nvdThird Party Advisory
github.com/wliang6/ChatEngine/blob/master/WebContent/WEB-INF/lib/chatbox.jspnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000