Plugin-Planet Simple Ajax Chat
5 CVEs affecting Plugin-Planet Simple Ajax Chat. Latest disclosed: 2024-06-04. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1983 | High | 7.1 | 2024-03-20 | The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsani… |
CVE-2024-2470 | Medium | 5.4 | 2024-06-04 | The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could allow high privilege users such as admin… |
CVE-2022-27850 | Medium | 5.4 | 2022-04-15 | Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message. |
CVE-2022-27849 | Medium | 5.3 | 2022-04-15 | Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115 |
CVE-2022-25610 | Low | 3.4 | 2022-03-25 | Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires… |