Threats tagged 'ghsa-434w-8m89-v963'

The AskAny WordPress plugin versions before 2.2.1 have a vulnerability where the plugin does not verify that a chat session belongs to the requester before returning or modifying it. This flaw allows unauthenticated users who can obtain or guess another visitor's session identifier to access that visitor's chat transcript, personal details such as name, email address, and IP address, and to add or overwrite messages in the conversation.