CVE-2019-25262

A security vulnerability has been detected in elinicksic Razgover up to db37dfc5c82f023a40f2f7834ded6633fb2b5262. This affects an unknown part of the file Chattify/send.php of the component Chat Message Handler. Such manipulation of the argument msg leads to cross site scripting. The attack may be performed from remote. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The name of the patch is 995dd89d0e3ec5522966724be23a5d58ca1bdac3. Applying a patch is advised to resolve this issue. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-79
• CWE-94

• https://github.com/elinicksic/Razgover/commit/995dd89d0e3ec5522966724be23a5d58ca1bdac3
• https://vuldb.com/?ctiid.338649
• https://vuldb.com/?id.338649

Published

Dec 31, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25257LogicalDOC Enterprise 7.7.4 contains multiple authenticated …8.7
• CVE-2019-25258LogicalDOC Enterprise 7.7.4 contains multiple post-authentic…7.5
• CVE-2019-25259Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains …5.3
• CVE-2019-2526Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2019-25260OXID eShop versions 6.x prior to 6.3.4 contains a SQL inject…8.8
• CVE-2019-25261AnyDesk 5.4.0 contains an unquoted service path vulnerabilit…8.5
• CVE-2019-25263Zendesk SweetHawk Survey 1.6 contains a persistent cross-sit…6.4
• CVE-2019-25264Snipe-IT 4.7.5 contains a persistent cross-site scripting vu…6.4
• CVE-2019-25265Online Inventory Manager 3.2 contains a stored cross-site sc…6.4
• CVE-2019-25266Wondershare Application Framework Service 2.4.3.231 contains…8.5
• CVE-2019-25267Wing FTP Server 6.0.7 contains an unquoted service path vuln…8.5
• CVE-2019-25268NREL BEopt 2.8.0.0 contains a DLL hijacking vulnerability th…9.8