Multiple Vulnerabilities in Drupal DrupalChat Module

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. Cross-site request forgery and cross-site scripting vulnerabilities exist in the Drupal DrupalChat module. An attacker can exploit the vulnerability to execute arbitrary...

DrupalChat - Critical - Multiple vulnerabilities - SA-CONTRIB-2017-057

UPDATE 2017-07-12 : This SA originally recommended version 2.6, but it was incorrectly tagged. We've updated the SA to recommend version 2.7. Sorry for the confusion! DrupalChat allows visitors of your Drupal site to chat with each other privately or together in a public chatroom. The module did...