The iFlyChat WordPress plugin before 4.7.0 does not sanitise its APP ID setting before outputting it back in the page, leading to an authenticated Stored Cross-Site Scripting issue...
4.8CVSS5.8AI score0.00613EPSS
SaveExploits2References1
ATTACKERKB•added 2021/06/07 11:15 a.m.•3 views
CVE-2021-24343
The iFlyChat WordPress plugin before 4.7.0 does not sanitise its APP ID setting before outputting it back in the page, leading to an authenticated Stored Cross-Site Scripting issue...
