Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-25610 1 Plugin-planet 1 Simple Ajax Chat 2024-09-16 3.4 Low
Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit.
CVE-2022-25601 2 Fedoraproject, Plugin-planet 2 Fedora, Contact Form X 2024-09-16 4.7 Medium
Reflected Cross-Site Scripting (XSS) vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin (versions <= 2.4).