CVE-2022-25610: WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-25610?
CVE-2022-25610 is an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Simple Ajax Chat <= 20220115.
How severe is CVE-2022-25610?
CVE-2022-25610 has a severity value of 6.1, which is considered medium.
What software is affected by CVE-2022-25610?
The Simple Ajax Chat plugin version up to and including 20220115 for WordPress is affected by CVE-2022-25610.
How can an attacker exploit CVE-2022-25610?
An attacker can exploit CVE-2022-25610 by storing malicious code in the Simple Ajax Chat plugin, but specific conditions are required to successfully exploit it.
Is there a fix for CVE-2022-25610?
Yes, the Simple Ajax Chat plugin has released a patch to fix CVE-2022-25610. Please refer to the provided references for more information.