Not rated
CVE-2022-2361 The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow…
Description
The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Social Chat – Click To Chat App 6.0 | earliest → < 6.0.5 | 6.0.5 |