CVE-2025-7951: code-projects Public Chat Room send_message.php cross site scripting
A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0. This affects an unknown part of the file /sendmessage.php. The manipulation of the argument chatmsg/yourname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7951?
CVE-2025-7951 is classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-7951?
Fix CVE-2025-7951 by sanitizing user input in the chat_msg and your_name parameters to prevent script injection.
What does CVE-2025-7951 affect?
CVE-2025-7951 affects the Public Chat Room application, specifically the send_message.php file.
Is CVE-2025-7951 remotely exploitable?
Yes, CVE-2025-7951 can be exploited remotely, making it a significant security concern.
What type of attack can CVE-2025-7951 facilitate?
CVE-2025-7951 facilitates cross-site scripting (XSS) attacks, which can compromise user session security.