VYPR

Twchat

by WordPress

Source repositories

CVEs (1)

  • CVE-2024-11374MedDec 7, 2024
    risk 0.40cvss 6.1epss 0.00

    The TWChat – Send or receive messages from users plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.0.4. This makes it possible for…