CVE-2022-21650 : What You Need to Know
Learn about the Stored XSS vulnerability in Convos that allows attackers to execute malicious scripts by bypassing the upload filter. Update your version to secure your chat system.
Convos, an open-source multi-user chat running in a web browser, is impacted by a Stored XSS vulnerability. This vulnerability allows an attacker to execute malicious scripts by bypassing the upload filter through an SVG file masquerading as an HTML file.