CVE Database /
CVE-2022-3858
CVE · High
CVE-2022-3858 — Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty [chaty] < 3.0.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-3858
|
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty [chaty] < 3.0.3 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
7.2
|
< 3.0.3
|
3.0.3 |
2022-11-14 |
—
|
CVE-2022-3858
The Chaty plugin through version 3.0.2 contains a SQL injection vulnerability stemming from inadequate escaping of the $chaty_leads parameter and improperly prepared SQL statements. Authenticated users with administrator privileges or above can exploit this flaw to inject malicious SQL code and retrieve sensitive data from the database. The vulnerability was resolved in version 3.0.3.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings