NEOJAPAN Inc. ChatLuck vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NEOJAPAN Inc. ChatLuck: 3 record(s), with affected versions and fixes.
CVE-2025-58115
Medium · 6.1
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. ChatLuck
ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.
CVE-2025-54461
Medium · 5.3
CWE-1220 Oct 16, 2025
ChatLuck contains an insufficient granularity of access control vulnerability in…
ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user.
CVE-2025-53858
Medium · 5.4
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. ChatLuck
ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.