CVE-2019-7316: Css-Tricks CHAT2

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.

Affected products

• Css-Tricks CHAT2: up to and including 2015-05-05

Published 2019-02-04. Last modified 2026-06-17.