CNNVD-202510-2167 Information
Oct 15, 2025
cve
CNNVD ID
CNNVD-202510-2167
Related CVE
- CNNVD Published: 2025-10-15
Description (Chinese)
Oct8ne Chatbot是Oct8ne公司的一个聊天机器人。 Oct8ne Chatbot v2.3版本存在跨站脚本漏洞，该漏洞源于存储型跨站脚本，可能导致攻击者在受害者浏览器中执行JavaScript代码。
Description (English)
Oct 8ne Chatbot is a chat robot at Oct 8ne. The Oct8ne Chatbot v2.3 version has a cross-site script loophole, which originates in a storage-type cross-site script and may result in the aggressors implementing the JavaScript code in the victim browser.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Oct8ne
Published
2025-10-15
Last Modified
2026-02-24
References
https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-oct8ne-chatbot
Patch
https://oct8ne.com/marketplace-prestashop
Share on: