CVE-2021-24343

MEDIUM 4.8CVE-2021-24343 · Published 07/06/2021 · updated 17/06/2026

In short

CVE-2021-24343 is a MEDIUM (CVSS 4.8) vulnerability affecting iflychat (iflychat).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.6% of all vulnerabilities.
Fix: update to 4.7.0 or later.

Package	Affected versions	Patched versions
iflychat iflychat	`< 4.7.0`	`4.7.0`

Description

The iFlyChat WordPress plugin before 4.7.0 does not sanitise its APP ID setting before outputting it back in the page, leading to an authenticated Stored Cross-Site Scripting issue

References

wpscan.com/vulnerability/d6c72d90-e321-47b9-957a-6fea7c944293 · Exploit

More vulnerabilities in iflychat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free