CVE-2022-25610

概要

参考情報

• patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-unauthenticated-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/simple-ajax-chat · Release Notes

simple ajax chat のその他の脆弱性

• CVE-2024-2470中 5.4The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could allow high privilege u…
• CVE-2024-1983高 7.1The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will …
• CVE-2022-27850中 4.3Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a ch…
• CVE-2022-27849高 7.5Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115