Lucene search

K

Wp Chat App Security Vulnerabilities

cve
cve

CVE-2024-2837

The WP Chat App WordPress plugin before 3.6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admins to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

5.4CVSS

8.3AI Score

0.0004EPSS

2024-04-26 05:15 AM
32
cve
cve

CVE-2024-4664

The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admins to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

4.8CVSS

5.7AI Score

0.0004EPSS

2024-06-27 06:15 AM
21