CVE-2022-25610

State: PUBLISHED · Published: 2022-03-25 · Updated: 2025-02-20 · Assigner: Patchstack

Description

Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit.

CWE

CWE-79 — CWE-79 Cross-site Scripting (XSS)

Affected

Jeff Starr / Simple Ajax Chat (WordPress plugin) — v=<= 20220115 ≤20220115 [affected]

CVSS

3.1 score=3.4 severity=LOW CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

References

https://wordpress.org/plugins/simple-ajax-chat/#developers x_refsource_CONFIRM
https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-unauthenticated-stored-cross-site-scripting-xss-vulnerability x_refsource_CONFIRM

Source

cvelistV5-main/cves/2022/25xxx/CVE-2022-25610.json