WordPress Plugin Vulnerabilities

Chat <= 1.0.8 - Cross-Site Scripting (XSS) in 'message' Parameter

Description

The chat WordPress plugin was affected by a Cross-Site Scripting (XSS) in 'message' Parameter security vulnerability.

Affects Plugins

Plugin icon
chat
Fixed in 1.0.8.1

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
6ce50557-e346-403d-b5b9-560a4dfb64bb

Timeline

Publicly Published
2013-08-05 (about 12 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2016-09-08 (about 9 years ago)

Other

Published
Title
Published
2024-11-06
Title
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider < 3.15.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
Published
2025-02-20
Title
WP Click Info <= 2.7.4 - Reflected XSS
Published
2025-11-17
Title
Meta Display Block <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-03-20
Title
Simple Giveaways < 2.45.1 - Admin+ Stored Cross-Site Scripting
Published
2024-08-29
Title
EasyJobs < 2.4.15 - Reflected Cross-Site Scripting