Stored XSS Vulnerability in RumbleTalk Live Group Chat by RumbleTalk

CVE-2025-58626

What is CVE-2025-58626?

The RumbleTalk Live Group Chat application is affected by a stored cross-site scripting vulnerability caused by improper input neutralization. This issue permits attackers to inject malicious scripts that could be executed in the context of an unsuspecting user's session. Malicious scripts could lead to data theft, session hijacking, or unauthorized actions performed on behalf of the user. This vulnerability impacts all versions from n/a to 6.3.5, emphasizing the need for users to apply available patches and secure their implementations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References