Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: mxchat Clear all filters
TI-2026-81749 CVE-2026-110662 · GHSA-jgfm-j27x-x26p

Stored DOM-based cross-site scripting in MxChat WordPress plugin

Priority LOW 31

The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feedback' parameter in all versions up to, and including, 3.2.25 due to insu…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00307 Published 2026-10-28 No fix listed CWE-79
TI-2026-11064 CVE-2026-13005 · GHSA-3hjj-97jw-2f47

MxChat <= 3.2.10 - Authenticated (Admin+) Stored Cross-Site Scripting via 'intro_message' Setting

Priority LOW 20

The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.10 due to insufficient input sanit…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00327 Published 2026-07-16 No fix listed CWE-79