Jeff Starr Simple Ajax Chat (WordPress Plugin)
3 CVEs affecting Jeff Starr Simple Ajax Chat (WordPress Plugin). Latest disclosed: 2022-04-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-27850 | Medium | 5.4 | 2022-04-15 | Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message. |
CVE-2022-27849 | Medium | 5.3 | 2022-04-15 | Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115 |
CVE-2022-25610 | Low | 3.4 | 2022-03-25 | Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires… |