PatchTheCVE: chatenginehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-30321: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 https://patchthecve.com/cve/CVE-2023-30321.htmlhttps://patchthecve.com/cve/CVE-2023-30321.htmlWed, 17 Jun 2026 05:54:29 +0000CRITICAL 9.0: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.CVE-2023-30320: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 Chhttps://patchthecve.com/cve/CVE-2023-30320.htmlhttps://patchthecve.com/cve/CVE-2023-30320.htmlWed, 17 Jun 2026 05:54:29 +0000CRITICAL 9.0: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.CVE-2023-30319: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 Chahttps://patchthecve.com/cve/CVE-2023-30319.htmlhttps://patchthecve.com/cve/CVE-2023-30319.htmlWed, 17 Jun 2026 05:54:28 +0000CRITICAL 9.6: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.CVE-2023-30326: Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 Chttps://patchthecve.com/cve/CVE-2023-30326.htmlhttps://patchthecve.com/cve/CVE-2023-30326.htmlWed, 17 Jun 2026 05:54:29 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.CVE-2023-30325: SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine https://patchthecve.com/cve/CVE-2023-30325.htmlhttps://patchthecve.com/cve/CVE-2023-30325.htmlWed, 17 Jun 2026 05:54:29 +0000HIGH 7.5: SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information.CVE-2023-30323: SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, ahttps://patchthecve.com/cve/CVE-2023-30323.htmlhttps://patchthecve.com/cve/CVE-2023-30323.htmlWed, 17 Jun 2026 05:54:29 +0000HIGH 7.5: SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information.CVE-2023-30322: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEnhttps://patchthecve.com/cve/CVE-2023-30322.htmlhttps://patchthecve.com/cve/CVE-2023-30322.htmlWed, 17 Jun 2026 05:54:29 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code.