CVE-2019-1010104

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...

CVE-2019-1010104

The CVE-2019-1010104 entry concerns the TechyTalk Quick Chat WordPress plugin. A SQL Injection vulnerability exists in the plugin’s Quick-chat.php, specifically where the like_escape function is used (line 399), making the database susceptible to crafted Ajax requests. Multiple connected records ...