Vendors / Ciprianmp Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Ciprianmp records in CISA KEV No Ciprianmp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 77
phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmc_username parameter that allows attackers to manipulate database queries.
CVSS 4.0 HIGH 8.8· Network · No auth · No interaction · EPSS 0.00455 · Published 2026-02-05 · No fix listed CWE-89
Priority MEDIUM 47
phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.21232 · Published 2019-12-20 · No fix listed CWE-79
Priority LOW 39
phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.01457 · Published 2020-02-18 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
0 2 1 0 0
