Phpmychat-plus@1.98 Security Vulnerabilities and Issues — Phpmychat-plus@1.98 CVE List

Lucene search

CiprianmpPhpmychat-plus1.98

2 matches found

CVE•added 2019/12/20 1:15 p.m.•65 views

CVE-2019-19908

phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable.

6.1CVSS6.1AI score0.54847EPSS

CVE•added 2020/02/18 7:15 p.m.•59 views

CVE-2020-9265

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.

9.3CVSS8.3AI score0.01002EPSS