CVE-2018-5979: Wchat Project Wchat

Critical severity, CVSS 9.8. EPSS: 19.2% chance of exploitation in the next 30 days.

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

Affected products

• Wchat Project Wchat: version 1.5 only

Published 2018-01-24. Last modified 2026-06-17.