CVE-2021-45822

Name of the Vulnerable Software and Affected Versions Xbtit version 3.1

Description A cross-site scripting issue is present due to improper validation of the n parameter in the "/ajaxchat/sendChatData.php" API endpoint. This allows an attacker to execute malicious JavaScript code.

Recommendations For Xbtit version 3.1, ensure proper validation of the n parameter in the "/ajaxchat/sendChatData.php" endpoint to prevent malicious code execution. As a temporary workaround, consider restricting access to this endpoint until a patch is available.