CVE-2022-2361: Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting
The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2361?
The severity of CVE-2022-2361 is classified as medium due to the potential for Stored Cross-Site Scripting vulnerabilities affecting high privilege users.
How do I fix CVE-2022-2361?
To fix CVE-2022-2361, update the WP Social Chat plugin to version 6.0.5 or later.
Who is affected by CVE-2022-2361?
CVE-2022-2361 affects all versions of the WP Social Chat plugin prior to 6.0.5 installed on WordPress sites.
What can attackers do with CVE-2022-2361?
Attackers can exploit CVE-2022-2361 to perform Stored Cross-Site Scripting attacks, potentially compromising the site and its users.
Is CVE-2022-2361 being actively exploited?
There is currently no public information confirming active exploitation of CVE-2022-2361, but it poses a significant risk.