Stored XSS Vulnerability in RumbleTalk Live Group Chat by RumbleTalk

CVE-2025-58626

What is CVE-2025-58626?

The RumbleTalk Live Group Chat application is affected by a stored cross-site scripting vulnerability caused by improper input neutralization. This issue permits attackers to inject malicious scripts that could be executed in the context of an unsuspecting user's session. Malicious scripts could lead to data theft, session hijacking, or unauthorized actions performed on behalf of the user. This vulnerability impacts all versions from n/a to 6.3.5, emphasizing the need for users to apply available patches and secure their implementations.

References