NEOJAPAN ChatLuck Cross-Site Scripting Vulnerability in Guest User Sign-Up
Vulnerability
A cross-site scripting vulnerability has been identified in the ChatLuck application by NEOJAPAN Inc., specifically in the Guest User Sign-up feature. This vulnerability allows for the execution of arbitrary scripts in the web browser of users accessing the application. It affects ChatLuck versions 3.6 R1.0 to 6.6 R1.0.
Impact
Exploitation of this vulnerability allows for cross-site scripting, where an attacker can execute scripts in the context of the user's browser.
Remediation
Users are advised to update ChatLuck to version 6.6 R2.0, which addresses this vulnerability.
Added: Oct 16, 2025, 9:18 AM
Updated: Oct 16, 2025, 3:53 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
6.4remediation
0.0relevance
0.7threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.