CVE-2022-21830

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A blind self XSS vulnerability exists in RocketChat LiveChat <v1.9 that could allow an attacker to trick a victim pasting malicious code in their chat instance.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/aRocket.chat LivechatFixed in v1.9

References

Timeline

Published
Apr 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-218319.8A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguCVE-2022-218337.8Virtual Machine IDE Drive Elevation of Privilege VulnerabilityCVE-2022-218347.8Windows User-mode Driver Framework Reflector Driver Elevation of Privilege VulnerabilityCVE-2022-218357.8Microsoft Cryptographic Services Elevation of Privilege VulnerabilityCVE-2022-218367.8Windows Certificate Spoofing VulnerabilityCVE-2022-218378.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-218387.8Windows Cleanup Manager Elevation of Privilege VulnerabilityCVE-2022-218395.5Windows Event Tracing Discretionary Access Control List Denial of Service VulnerabilityCVE-2022-21848.8The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-side templates. This cCVE-2022-218408.8Microsoft Office Remote Code Execution VulnerabilityCVE-2022-218417.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2022-218427.8Microsoft Word Remote Code Execution Vulnerability