CVE-2026-13005 - MxChat <= 3.2.10 - Authenticated (Admin+) Stored Cross-Site Scripting via 'intro_message' Setting

CVE ID :CVE-2026-13005 Published : July 16, 2026, 4:17 a. m. | 38 minutes ago Description :The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.

2. 10 due to insufficient input sanitization and output escaping.