CVE-2025-22292 WordPress Powerful Auto Chat plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Felipe Peixoto Powerful Auto Chat powers-triggers-of-woo-to-chat allows Stored XSS.This issue affects Powerful Auto Chat: from n/a through = 1.9.8...

CVE-2025-22292

CVE-2025-22292 is a WordPress plugin vulnerability in Powerful Auto Chat (by Felipe Peixoto) that allows Stored Cross-Site Scripting in versions up to 1.9.8. Public records describe improper input neutralization during page generation as the root cause and confirm affected software/versions, with...