medium5.4
CVE-2022-27850
Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.
Impact
Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plugin-Planet | Simple Ajax Chat | through 20220115 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-multiple-cross-site-request-forgery-csrf-vulnerability
- https://wordpress.org/plugins/simple-ajax-chat/#developers
- https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-multiple-cross-site-request-forgery-csrf-vulnerability
- https://wordpress.org/plugins/simple-ajax-chat/#developers