CVE-2022-25610: Plugin-Planet Simple AJAX Chat

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit.

Affected products

• Plugin-Planet Simple AJAX Chat: before 20220115 (fixed in 20220115)

Published 2022-03-25. Last modified 2026-06-17.