CVE-2024-1983

Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS

High · published March 20, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Published
2024-03-20T05:00Z
EPSS history
Timeline
  • 20 MAR 05:00Z
    Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
    cvelistv5