CVE-2025-32559

Name of the Vulnerable Software and Affected Versions: REVE Chat versions n/a through 6.2.2

Description: The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability and Stored XSS in REVE Chat.

Recommendations: For versions n/a through 6.2.2, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to sensitive features that may be exploited through CSRF or Stored XSS attacks until a patch is available.