| Package | Affected versions | Patched versions |
|---|---|---|
| phpmychat-plus | = 1.98 |
phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free