CVE-2005-2545: Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject a...

Security readout for executives and security teams

PHPOpenChat 3.0.2 contains multiple cross-site scripting weaknesses. An attacker could submit script or HTML into profile, mail, user page, or invite fields so that other users' browsers run attacker-controlled content. The source bundle does not provide a CVSS score, patch status, or evidence of active exploitation. Exposure is limited to organizations still running PHPOpenChat 3.0.2, especially internet-facing deployments using profile, mail, invite, or user page features. Because this is a 2005-era application, exposure is likely uncommon but potentially high-risk where legacy systems remain reachable. Treat this as a legacy-web cleanup issue unless PHPOpenChat 3.0.2 is internet-facing or used by privileged users. If present, prioritize isolation, upgrade or retirement, and verification because XSS can support account compromise and trust abuse. Mitigation focus: Inventory for PHPOpenChat 3.0.2 and retire unsupported deployments where possible.; Check vendor or trusted archival guidance for any fixed release before upgrading.; Restrict public access to remaining instances until remediation is confirmed..

Prepared

Jun 29, 2026, 18:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.