CVE-2022-27849 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

2022-04-1516:24:44

CWE-200

Patchstack

www.cve.org

wordpress

simple ajax chat

sensitive information disclosure

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.005

Percentile

76.5%

JSON

Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115

CNA Affected

[
  {
    "product": "Simple Ajax Chat (WordPress plugin)",
    "vendor": "Jeff Starr",
    "versions": [
      {
        "lessThanOrEqual": "20220115",
        "status": "affected",
        "version": "<= 20220115",
        "versionType": "custom"
      }
    ]
  }
]