privoce vulnerabilities

Products

• vocechat 1
• vocechat server 1

Latest privoce CVEs

Newest publication first

1. CVE-2026-116047 Privoce Vocechat Query Parameter widget.html cross site scripting

   Published 2026-10-25

   Medium·CVSS 5.3 EPSS 0.26%

   A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remot...

2. CVE-2026-100893 Privoce VoceChat Server open_graphic_parse Endpoint resource.rs fetch server-side request forgery

   Published 2026-09-28

   Medium·CVSS 6.9 EPSS 0.28%

   A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function open_graph::fetch of the file src/api/resource.rs of the component open_graphic_parse Endpoint. Executing a manipulation of the argument url can lead to server-side req...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.