Vulnerabilities (CVE)

Filtered by vendor Plugin-planet Subscribe
Filtered by product Simple Ajax Chat
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-27850 1 Plugin-planet 1 Simple Ajax Chat 2024-11-21 4.3 MEDIUM 5.4 MEDIUM
Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.
CVE-2022-27849 1 Plugin-planet 1 Simple Ajax Chat 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115
CVE-2022-25610 1 Plugin-planet 1 Simple Ajax Chat 2024-11-21 4.3 MEDIUM 3.4 LOW
Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit.