CVE-2024-1983: Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS
Published Mar 20, 2024
·Updated
The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.
Affected Software
2 affected components
Plugin-planet Simple Ajax Chat Wordpress<20240223
Simple Ajax Chat Simple Ajax Chat<20240223
Event History
Mar 20, 2024
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
DescriptionWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-1983?
CVE-2024-1983 is classified as a medium severity vulnerability due to its potential impact on user experience and safety.
2
How do I fix CVE-2024-1983?
To fix CVE-2024-1983, update the Simple Ajax Chat plugin to version 20240223 or later.
3
What type of vulnerability is CVE-2024-1983?
CVE-2024-1983 is a cross-site scripting (XSS) vulnerability caused by unsanitized user input in the chat feature.
4
Who is affected by CVE-2024-1983?
Websites using versions of the Simple Ajax Chat plugin before 20240223 are affected by CVE-2024-1983.
5
What can attackers achieve with CVE-2024-1983?
Attackers can exploit CVE-2024-1983 to inject malicious names in the chat, potentially deceiving or harassing other users.