CVE-2024-13019

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/update_room.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

Vendor	Product	Versions
code-projects	Chat System	1.0

References

https://code-projects.org/Product
https://vuldb.com/?ctiid.289710Permissions Required, VDB Entry
https://vuldb.com/?id.289710Third Party Advisory, VDB Entry
https://vuldb.com/?submit.470599Third Party Advisory, VDB Entry
https://code-projects.org/chat-system-using-php-source-code/Product

Timeline

Published: Dec 29, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-13025.5Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the ap CVE-2024-130208.8A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionalit CVE-2024-130215.4A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue CVE-2024-130229.8A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the fil CVE-2024-130236.1A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. This vulnerability affects unk CVE-2024-130249.8A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processin CVE-2024-130258.8A vulnerability was found in Codezips College Management System 1.0. It has been classified as critical. Affected is an unknown function of CVE-2024-130266.1A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The vulnerability impact CVE-2024-130283.7A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This issue affects some unknown pr CVE-2024-130298.8A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the CVE-2024-13036.5Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier CVE-2024-130309.8A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoReboot