Vulnerabilities > CVE-2021-44163 - Unspecified vulnerability in Chinasea QB Smart Service Robot
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attacker to perform JavaScript injection for XSS (reflected Cross-site scripting) attack without authentication.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |