Approved changes feed: RSS · Atom

cpe:2.3:a:click2magic:click2magic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorClick2Magic (e50fe568-c072-5711-a5e3-21311ae24167)
ProductClick2Magic (824b06f3-48a3-542b-bde0-3a2fd4a74fcb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36931 vulnerable 2026-06-08 05:25:49.872520 Click2Magic 1.1.5 - Stored Cross-Site Scripting
MEDIUM (6.4)
Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests.
Published: 2026-01-25T12:24:00.804Z
Updated: 2026-01-26T13:33:08.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.