VULNERABILITY INTELLIGENCE

CVE-2024-1983

CVSS score7.1 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2024-03-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Description

The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.

Primary references