CVE-2022-25610

CVE-2022-25610 affects the WordPress plugin Simple Ajax Chat ≤ 20220115. The vulnerability is an unauthenticated Stored Cross-Site Scripting (XSS) due to insufficient data validation/filtering of user input and output, allowing an attacker to store malicious code. Multiple connected sources corro...

CVE-2024-1983

The Simple Ajax Chat WordPress plugin (versions before 20240223 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw occurs because the plugin fails to sanitize malicious names used in the chat, which are then reflected to other users. This vulnerability is confirmed as patched in rece...

CVE-2024-2470

The Simple Ajax Chat WordPress plugin, in versions prior to 20240412 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks,...