Skip to content
Threat Feed
Subscribe

Vendor

MxChat

1 brief RSS
high advisory

MxChat: Stored DOM-Based Cross-Site Scripting (CVE-2026-110662)

The MxChat AI Chatbot plugin for WordPress is vulnerable to unauthenticated stored DOM-based XSS, allowing script injection via the feedback parameter that executes in an administrator's session.

MxChat – AI Chatbot & Content Generation for WordPress xss web-vulnerability wordpress
2t 1c