CVE-2026-81807

CVE-2026-81807 affects the Simple Ajax Chat WordPress plugin prior to version 20260827 . The root cause is that chat message content is not properly escaped during the linkification process before rendering, resulting in an unauthenticated stored XSS . An attacker can inject arbitrary HTML attrib...