PT-2024-22938 · WordPress · The Simple Ajax Chat

Published

2024-04-09

·

Updated

2024-04-24

·

CVE-2024-2957

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress versions up to, and including, 20240216
Description The issue is related to Stored Cross-Site Scripting via the name field. This allows for potential malicious script injection.
Recommendations For versions up to, and including, 20240216, as a temporary workaround, consider restricting user input in the name field to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-2957

Affected Products

The Simple Ajax Chat