CVE-2013-4103: Cryptocat Project Cryptocat

Critical severity, CVSS 9.8. EPSS: 6.9% chance of exploitation in the next 30 days.

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

Affected products

• Cryptocat Project Cryptocat: before 2.0.22 (fixed in 2.0.22)

Published 2019-11-04. Last modified 2026-06-16.