CVE Database /
CVE-2023-25019
CVE · High
CVE-2023-25019 — Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty [chaty] < 3.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-25019
|
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty [chaty] < 3.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 3.1
|
3.1 |
2023-05-16 |
—
|
CVE-2023-25019
The Chaty plugin for WordPress before version 3.1 contains a cross-site scripting vulnerability that could allow attackers to inject malicious scripts into websites, potentially executing redirects, advertisements, or other HTML-based payloads that would run when visitors access the site. The flaw was discovered and reported by Rafie Muhammad from Patchstack. Users should upgrade to version 3.1 or later to patch this security issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings