Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mxchat:mxchat_-_Ai_chatbot_&_content_generation_for_wordpress:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

MxChat: Stored DOM-Based Cross-Site Scripting (CVE-2026-110662)

The MxChat AI Chatbot plugin for WordPress is vulnerable to unauthenticated stored DOM-based XSS, allowing script injection via the feedback parameter that executes in an administrator's session.

MxChat – AI Chatbot & Content Generation for WordPress xss web-vulnerability wordpress
2t 1c