Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-65920
HistoryJun 28, 2022 - 12:00 a.m.

Wire Cross-Site Scripting Vulnerability (CNVD-2022-65920)

2022-06-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wire
chat software
cross-site scripting
vulnerability
german company
web
windows
ios
android
os x
group functionality
voice calls
photos
ping
javascript code

EPSS

0.001

Percentile

31.6%

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire has a cross-site scripting vulnerability that stems from insufficient Wire escaping and can be exploited by attackers to execute JavaScript code on the client side.

EPSS

0.001

Percentile

31.6%

Related for CNVD-2022-65920