CVE-2000-0787: Xchat

High severity, CVSS 7.5. EPSS: 9.2% chance of exploitation in the next 30 days.

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.

Affected products

• Xchat Xchat: version 1.2.1 only; version 1.3.9 only; version 1.3.10 only; version 1.3.11 only; version 1.3.12 only; version 1.3.13 only; …

Published 2000-10-20. Last modified 2026-06-16.