High · 7.1 CVE-2024-49605 EUVD-2024-43468GHSA-3rw3-4f78-wjrx

WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

Published Oct 20, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: Stefan Nour Product: AVChat Video Chat

Description

Cross-Site Request Forgery (CSRF) vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through <= 2.2.

Affected products

Vendor	Product	Affected	Fixed
Stefan Nour	AVChat Video Chat	≤ 2.2	—

References

https://patchstack.com/database/Wordpress/Plugin/avchat-3/vulnerability/wordpress-community-lite-video-chat-plugin-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry