Medium severity4.8NVD Advisory· Published Jun 7, 2021· Updated Jun 17, 2026

CVE-2021-24343

Description

The iFlyChat WordPress plugin before 4.7.0 does not sanitise its APP ID setting before outputting it back in the page, leading to an authenticated Stored Cross-Site Scripting issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/iFlyChat WordPress plugindescription
WordPress/iFlyChatllm-fuzzy
Range: <4.7.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d6c72d90-e321-47b9-957a-6fea7c944293nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000