Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6b4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-25144 Stored XSS Vulnerability in Talishar Flesh and Blood Game Chat System https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25144
Post summary
The CVE refers to a stored XSS vulnerability in the Talishar Flesh and Blood Game Chat System, with no PoC, exploitation, patch, or false‑positive information provided.
CVE-2026-25144 Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitiza… https://www.cve.org/CVERecord?id=CVE-2026-25144
Post summary
CVE‑2026‑25144 reveals a stored XSS in Talishar’s in‑game chat where the playerID parameter is unsanitized; no PoC, exploit, or mitigation is discussed.