Threats tagged 'ghsa-f3rx-q599-wf5g'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118071The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before outputting it in an High2026-10-30GCVE DatabaseCVE-2026-118071 The Joinchat WordPress plugin versions prior to 6.4.2 contain a vulnerability where the message of its button block is not properly escaped before being output in an HTML attribute on the front end. This flaw allows users with Author role or higher to execute stored cross-site scripting (XSS) attacks against visitors of the post, including administrators. Report on CVE-2026-118071 Vulnerability #ghsa-f3rx-q599-wf5g	GCVE Database	2026-10-30

Page 1 of 1