CVE WATCH / VULNERABILITY DETAIL

CVE-2026-110662

HIGHCVSS 7.2NVD feed

Published 28 October 2026 · tracked since 29 October 2026

Description

The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feedback' parameter in all versions up to, and including, 3.2.25 due to insufficient input sanitization and output escaping. This makes it possible for unau

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools