CVE-2026-73360

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 22/10/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Unauthenticated Cross Site Scripting (XSS) in Chaty Pro versions up to 3.5.8.

An attacker can exploit the vulnerability to execute malicious script in the user's browser, potentially leading to data theft or session hijacking.

Update the Chaty Pro plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS