CVE-2019-1010104

2019-07-1815:49:16

dwf

www.cve.org

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: like_escape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request.

CNA Affected

[
  {
    "product": "Quick Chat WordPress Plugin",
    "vendor": "TechyTalk",
    "versions": [
      {
        "status": "affected",
        "version": "All (At least as of date 2018-06-13)"
      }
    ]
  }
]

References

metalamin.github.io/Quick-Chat-SQLi-EN/