CVE Database /
CVE-2022-2361
CVE · Medium
CVE-2022-2361 — Social Chat – Click To Chat App Button [wp-whatsapp-chat] < 6.0.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-2361
|
Social Chat – Click To Chat App Button [wp-whatsapp-chat] < 6.0.5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 6.0.5
|
6.0.5 |
2022-07-18 |
—
|
CVE-2022-2361
The WP Social Chat plugin for WordPress contains a stored cross-site scripting vulnerability in version 6.0.4 and earlier affecting parameters like the 'background' field. The flaw stems from inadequate sanitization of input and insufficient escaping of output, allowing administrators and higher-privileged users to embed malicious scripts into pages. When other users view these compromised pages, the injected scripts execute in their browsers. This vulnerability was resolved in version 6.0.5.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings