CVE-2013-4107: Cryptocat Project Cryptocat

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting

Affected products

• Cryptocat Project Cryptocat: before 2.0.22 (fixed in 2.0.22)

Published 2019-11-05. Last modified 2026-06-16.