CVE-2026-118071

The Joinchat WordPress plugin (versions 6.3.2 - 6.4.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to escape the message of its button block before outputting it into an HTML attribute on the front end. This vulnerability allows users with the Author role or higher to inj...