TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - 2 Vulnerabilities
Cybersecurity Classified by Officially
8.6 (High) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.8 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.6 (High) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.8 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a security warning, attackers can execute arbitrary code with the privileges of the current user.
This is an extract. The publication continues at the source.
Read the original at the source: https://www.twcert.org.tw/en/cp-139-11271-be75e-2.html
Officially imported this from TWCERT/CC’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- TWCERT/CC — imported from official source
- Official source
- https://www.twcert.org.tw/en/rss-139-2.xml RSS
- Imported
- October 14, 2026 09:00
- Versions
- 1 recorded
- Identity
-
https://www.twcert.org.tw/en/cp-139-11271-be75e-2.html