Description Sakai through 12.6 allows XSS via a chat user name. Remediation References https://github.com/sakaiproject/sakai/pull/6971 Related Vulnerabilities CVE-2023-24187 Vulnerability in maven package com.bstek.ureport:ureport2-core CVE-2022-0235 Vulnerability in npm package node-fetch CVE-2022-36899 Vulnerability in maven package com.compuware.jenkins:compuware-ispw-operations CVE-2022-39299 Vulnerability in npm package passport-saml CVE-2022-0868 Vulnerability in npm package urijs Severity High Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Patch Third Party Advisory CWE-79