Threats tagged 'ghsa-q22q-3c39-hq93'

Chargemap has a stored cross-site scripting (XSS) vulnerability that allows a remote, authenticated attacker to inject malicious scripts into their user profile page. This payload executes when another user views the attacker's profile. The vulnerability has been fixed as of July 17, 2026.