Medium
Security advisory
A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-42584
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 11:58 UTC · Revision 1
Source evidence
A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.
osv:CVE-2021-42584
Complete source record
{
"id": "16ef66412747f51f4a25dcd14a61890f6b70d2f10c0fa89a85ae666fd66ef9c3",
"url": "https://osv.dev/vulnerability/CVE-2021-42584",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-42584",
"summary": "A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.",
"evidence": "osv:CVE-2021-42584",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2021-42584",
"aliases": [
"CVE-2021-42584"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/convos-chat/convos",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "5ef912125d2938516b88ee5c5dc760694f1f35c7"
},
{
"fixed": "14a3b1e98cd1a3211c0ef3d4f5ffdbc60baaca54"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:convos:convos:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "6.32"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "14a3b1e98cd1a3211c0ef3d4f5ffdbc60baaca54"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v6.31",
"v6.30",
"v6.29",
"v6.28",
"v6.27",
"v6.26",
"v6.25",
"v6.24",
"v6.23",
"v6.22",
"v6.21",
"v6.20",
"v6.19",
"v6.18",
"v6.17",
"v6.16",
"v6.15",
"v6.14",
"v6.13",
"v6.12",
"v6.11",
"v6.10",
"v6.09",
"v6.08",
"v6.07",
"v6.06",
"v6.04",
"v6.03",
"v6.02",
"v6.01",
"v6.00",
"v5.32",
"v5.31",
"v5.30",
"v5.29",
"v5.28",
"v5.27",
"v5.26",
"v5.25",
"v5.24",
"v5.23",
"v5.22",
"v5.21",
"v5.19",
"v5.18",
"v5.17",
"v5.16",
"v5.15",
"v5.14",
"v5.13",
"v5.12",
"v5.11",
"v5.10",
"v5.09",
"v5.08",
"v5.07",
"v5.06",
"v5.05",
"v5.04",
"v5.03",
"v5.02",
"v5.01",
"v5.00",
"v4.42",
"v4.41",
"v4.40",
"v4.39",
"v4.38",
"v4.37",
"v4.36",
"v4.35",
"v4.34",
"v4.32",
"v4.31",
"v4.30",
"v4.29",
"v4.28",
"v4.27",
"v4.26",
"v4.25",
"v4.24",
"v4.23",
"v4.22",
"v4.21",
"v4.19",
"v4.18",
"v4.16",
"v4.15",
"v4.14",
"v4.13",
"v4.12",
"v4.11",
"v4.10",
"v4.09",
"v4.08",
"v4.07",
"v4.06",
"v4.05",
"v4.04",
"v4.03",
"v4.02",
"v4.01",
"v4.00",
"v3.12",
"v3.11",
"v3.10",
"v3.09",
"v3.08",
"v3.06",
"v3.05",
"v3.04",
"v3.03",
"v3.02",
"v3.01",
"v3.00",
"v2.00",
"v1.02",
"v1.01",
"v1.00",
"v0.99_40",
"v0.99_39",
"v0.99_38",
"v0.99_37",
"v0.99_36",
"v0.99.35",
"v0.99_34",
"v0.99_33",
"v0.99_32",
"v0.99_31",
"v0.99_30",
"v0.99_28",
"v0.99_27",
"v0.99_26",
"v0.99_25",
"v0.99_23",
"v0.99_22",
"v0.99_21"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-42584.json"
}
}
],
"modified": "2026-10-20T10:55:00.724585533Z",
"provider": "osv",
"references": [
"https://github.com/convos-chat/convos/issues/623",
"https://github.com/convos-chat/convos/commit/14a3b1e98cd1a3211c0ef3d4f5ffdbc60baaca54",
"https://dev696.github.io/Writeup/"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2021-42584",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 386672,
"published_at": "2021-12-17T14:15:07.607+00:00"
}