Skip to content
OpenAdvisories
Low · 3.4 CVE-2022-25610 EUVD-2022-30270GHSA-c838-r8f2-9r8x

WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Mar 25, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit.

Affected products

VendorProductAffectedFixed
Jeff Starr Simple Ajax Chat (WordPress plugin) <= 20220115 – ≤ 20220115 —

References