Ciprianmp Phpmychat-Plus
3 CVEs affecting Ciprianmp Phpmychat-Plus. Latest disclosed: 2026-02-05. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-37151 | High | 8.2 | 2026-02-05 | phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmc_username parameter that allows attackers to manipulate datab… |
CVE-2020-9265 | High | 8.2 | 2020-02-18 | phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username. |
CVE-2019-19908 | Medium | 6.1 | 2019-12-20 | phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.p… |