CVE-2020-9265: Ciprianmp Phpmychat-Plus

High severity, CVSS 8.2. EPSS: 1.5% chance of exploitation in the next 30 days.

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.

Affected products

• Ciprianmp Phpmychat-Plus: version 1.98 only

Published 2020-02-18. Last modified 2026-06-17.