PT-2025-8931

Name of the Vulnerable Software and Affected Versions Chaty plugin for WordPress versions up to and including 3.3.5 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the data-hover parameter. This allows authenticated...

CVE-2025-1450: Improper Neutralization of Input During Web Page Generation

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-hover’ parameter in all versions up to, and including, 3.3.5 due to insufficient input...