3 matches found
CVE-2021-25016
The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...
6.1CVSS0.01798EPSS
SaveExploits2References1
CVE-2021-25016
CVE-2021-25016 affects the WordPress Chaty plugin (<= 2.8.3) and Chaty Pro (
6.1CVSS6AI score0.01798EPSS
SaveExploits2References1Affected Software2
CVE-2021-25016 Chaty < 2.8.3 - Reflected Cross-Site Scripting
The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...
6.2AI score0.01798EPSS
SaveExploits2References1
20