CVE-2024-1983: Plugin-Planet Simple AJAX Chat

High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.

Affected products

• Plugin-Planet Simple AJAX Chat: before 20240223 (fixed in 20240223)

Published 2024-03-20. Last modified 2026-06-17.