CVE-2026-66636

MediumCVSS 6.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Cross Site Scripting (XSS) vulnerability in Wise Chat in versions up to 3.4. A user with Contributor role can inject malicious script.

An attacker can steal session data or take over an administrator account, leading to site integrity compromise.

Update the plugin to the latest version that includes the security fix.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Wise Chat <= 3.4 versions.