{"id":"CVE-2014-5276","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-5276","generatedAt":"2026-10-27T23:08:48.347Z","title":"Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.","description":"Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.","published":"2014-10-20T16:55:09.000Z","lastModified":"2026-06-17T00:11:19.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":3.5,"severity":"LOW","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N"},"cwe":["CWE-79"],"affected":["pro chat rooms/text chat rooms"],"epss":{"score":0.02636,"percentile":0.85454,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2014-08-06","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":34275,"kind":"exploit","title":"Pro Chat Rooms 8.2.0 - Multiple Vulnerabilities","url":"https://www.exploit-db.com/exploits/34275","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/34275.txt","file":"exploits/php/webapps/34275.txt","published":"2014-08-06","added":"2014-08-09","updated":"2014-08-09","author":"Mike Manzotti","type":"webapps","platform":"php","port":80,"verified":false,"codes":["OSVDB-109831","OSVDB-109830","OSVDB-109829","OSVDB-109828","OSVDB-109827","CVE-2014-5276","CVE-2014-5275"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB, so the technical barrier is gone even though the severity is low and EPSS is 2.6%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-08/0026.html","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/127775/Pro-Chat-Rooms-8.2.0-XSS-Shell-Upload-SQL-Injection.html","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/34275","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95125","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95126","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-08/0026.html","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/127775/Pro-Chat-Rooms-8.2.0-XSS-Shell-Upload-SQL-Injection.html","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/34275","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95126","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-5276","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}