VendorsConvosconvosall versions
Vulnerabilities

Convos Convos

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-21649
Stored XSS via attribute in convos
Published 2022-01-04 · Modified
7.6EPSS 0.009
CVE-2022-21650
Stored XSS via html file upload in convos
Published 2022-01-04 · Modified
7.6EPSS 0.008
CVE-2021-42584
A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.
Published 2021-12-17 · Modified
5.4EPSS 0.007
CVE-2020-14423
Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOS_LOCAL_SECRET value, affecting password resets and invitations.
Published 2020-06-18 · Modified
5.3EPSS 0.011