Description
The iFlyChat WordPress plugin before 4.7.0 does not sanitise its APP ID setting before outputting it back in the page, leading to an authenticated Stored Cross-Site Scripting issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | iFlyChat – WordPress Chat | 4.7.0 – < 4.7.0 | 4.7.0 |