Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2021-29467

Self-XSS

Description

Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a patch exists in version 2.4.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

birb-digital wrongthink

  • < 2.4.1affected

References