CVE-2022-27849

概要

参考情報

• patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability · Third Party Advisory
• wordpress.org/plugins/simple-ajax-chat · Release Notes

simple ajax chat のその他の脆弱性

• CVE-2024-2470中 5.4The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could allow high privilege u…
• CVE-2024-1983高 7.1The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will …
• CVE-2022-27850中 4.3Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a ch…
• CVE-2022-25610中 6.1Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, t…