CVE-2026-6159 | code-projects Simple ChatBox up to 1.0 Endpoint /chatbox/insert.php msg cross site scripting

A vulnerability labeled as problematic has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown functionality of the file /chatbox/insert.php of the component Endpoint. Such manipulation of the argument msg leads to cross site scripting.

This vulnerability is listed as CVE-2026-6159. The attack may be performed from remote. In addition, an exploit is available.