How severe is CVE-2024-1983?

CVE-2024-1983 has a CVSS 3.x base score of 7.1, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability low.

Is CVE-2024-1983 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-1983?

CVE-2024-1983 affects Plugin-planet Simple Ajax Chat. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-1983?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2024-1983 have an EU (EUVD) identifier?

Yes. CVE-2024-1983 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-17699.

When was CVE-2024-1983 published?

CVE-2024-1983 was published on 2024-03-20 and last updated on 2026-06-17.

CVE-2024-1983

CVE-2024-1983 is a high-severity vulnerability in Plugin-planet Simple Ajax Chat with a CVSS 3.x base score of 7.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.1)
EPSS exploit prediction: 0% (36th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-17699
Affected product: Plugin-planet Simple Ajax Chat
Published: 2024-03-20
Last modified: 2026-06-17

Description

The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.

Frequently asked questions

What is CVE-2024-1983?: The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.
How severe is CVE-2024-1983?: CVE-2024-1983 has a CVSS 3.x base score of 7.1, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability low.
Is CVE-2024-1983 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-1983?: CVE-2024-1983 affects Plugin-planet Simple Ajax Chat. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-1983?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2024-1983 have an EU (EUVD) identifier?: Yes. CVE-2024-1983 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-17699.
When was CVE-2024-1983 published?: CVE-2024-1983 was published on 2024-03-20 and last updated on 2026-06-17.

References

https://wpscan.com/vulnerability/bf3a31de-a227-4db1-bd18-ce6a78dc96fb/

Affected products (1)

cpe:2.3:a:plugin-planet:simple_ajax_chat:*:*:*:*:*:wordpress:*:*

More vulnerabilities in Plugin-planet Simple Ajax Chat

CVE-2024-2470 — Medium (CVSS 5.4): The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could…
CVE-2022-27850 — Medium (CVSS 5.4): Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the…
CVE-2022-27849 — Medium (CVSS 5.3): Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115
CVE-2022-25610 — Low (CVSS 3.4): Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the…

All CVEs affecting Plugin-planet Simple Ajax Chat →