CVE-2026-15785

The Joinchat – Enhanced "click to chat" plugin for WordPress (versions up to and including 6.3.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping specifically involving the {HREF} Dynamic Variable via a Query Parameter...