Chaty Security Vulnerabilities and Issues — Chaty CVE List

PremioChaty

6 matches found

CVE•added 2022/01/03 12:49 p.m.•89 views

CVE-2021-25016

CVE-2021-25016 affects the WordPress Chaty plugin (<= 2.8.3) and Chaty Pro (

6.1CVSS6AI score0.01798EPSS

Web

CVE•added 2023/11/22 7:49 p.m.•83 views

CVE-2023-47759

CVE-2023-47759 describes a Cross-Site Scripting (XSS) issue in the Premio Chaty WordPress plugin, affecting versions

5.9CVSS6.6AI score0.00398EPSS

CVE•added 2022/04/11 7:37 p.m.•80 views

CVE-2021-36846

CVE-2021-36846 affects the WordPress Premio Chaty plugin; authenticated users (admin+) can store XSS in plugin settings. Public details cite versions <= 2.8.3 (and OpenVAS reference to

4.8CVSS4.8AI score0.00576EPSS

CVE•added 2022/12/05 4:50 p.m.•69 views

CVE-2022-3858

CVE-2022-3858 affects the WordPress plugin Chaty / Floating Chat Widget prior to version 3.0.3. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter before it is used in a SQL statement, making it exploitable by users with a role as low as admin. Documented impact...

7.2CVSS7.2AI score0.00992EPSS

Web

CVE•added 2023/07/17 1:29 p.m.•58 views

CVE-2023-3245

CVE-2023-3245 affects the Floating Chat Widget WordPress plugin (

4.8CVSS4.9AI score0.00451EPSS

CVE•added 2023/08/30 11:51 a.m.•43 views

CVE-2023-25019

The CVE-2023-25019 entry concerns the Premio Chaty WordPress plugin. Affected software: Chaty plugin versions up to and including 3.0.9. Vulnerable component: input handling in the plugin that enables unauthenticated, reflected Cross‑Site Scripting (XSS). Root cause and impact are described as un...

7.1CVSS6AI score0.00401EPSS