CVE-2026-118071 | Joinchat Plugin up to 6.4.1 on WordPress Button Block cross site scripting

October 30, 2026 Yanac

A vulnerability labeled as problematic has been found in Joinchat Plugin up to 6.4.1 on WordPress. Affected by this vulnerability is an unknown functionality of the component Button Block. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-118071. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More