Skip to content
OpenAdvisories
Unscored CVE-2022-2361 EUVD-2022-34629GHSA-2w93-2cv6-8w7c

Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting

Published Aug 22, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks.

Affected products

VendorProductAffectedFixed
— WP Social Chat – Click To Chat App 6.0.5 – < 6.0.5 6.0.5

References