low3.4
CVE-2022-25610
Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code.
Impact
Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plugin-Planet | Simple Ajax Chat | before 20220115 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-unauthenticated-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/simple-ajax-chat/#developers
- https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-unauthenticated-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/simple-ajax-chat/#developers