TI-2024-11553 CVE-2024-12451 · GHSA-wrf2-7gmj-mf6gHTML5 chat <= 1.07 - Authenticated (Contributor+) Stored Cross-Site ScriptingPriority LOW 28The HTML5 chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'HTML5CHAT' shortcode in all versions up to, and including, 1.07 due to insufficient input sanitization and output escapin…CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00282 · Published 2025-01-30 · No fix listed CWE-79