VYPR
Unrated severityNVD Advisory· Published Jun 27, 2024· Updated Aug 1, 2024

WP Chat App < 3.6.5 - Admin+ Stored XSS

CVE-2024-4664

Description

The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admins to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.