Medium · 4.8 CVE-2021-36846 EUVD-2021-23422GHSA-q2ff-r588-c49v

WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Apr 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Premio Chaty (WordPress plugin) <= 2.8.3

Vendor	Product	Affected	Fixed
Premio	Chaty (WordPress plugin)	<= 2.8.3 – ≤ 2.8.3	—