CVE-2026-25144 - Talishar has a Stored XSS which can lead to data exfiltration & user impersonation

CVE ID : CVE-2026-25144 Published : Feb. 2, 2026, 11:16 p.m. | 1 hour, 14 minutes ago Description : Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6b4. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...