CVE-2022-27849

Description

References

• patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability · Third Party Advisory
• wordpress.org/plugins/simple-ajax-chat · Release Notes

Más vulnerabilidades de simple ajax chat

• CVE-2024-2470MEDIO 5.4The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could allow high privilege u…
• CVE-2024-1983ALTO 7.1The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will …
• CVE-2022-27850MEDIO 4.3Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a ch…
• CVE-2022-25610MEDIO 6.1Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, t…