CVE-2024-11374

The TWChat – Send or receive messages from users plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 4.0.4. This makes it possible for unauthenticated attackers to injec...

CVE-2024-11374

CVE-2024-11374 affects the TWChat – Send or receive messages from users WordPress plugin. Public data confirms a Reflected Cross-Site Scripting vulnerability caused by using remove_query_arg without proper escaping, impacting all versions up to and including 4.0.4. Unauthenticated attackers can i...