What’s Vulnerable › Vulnerabilities

CVE-2020-9265

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-02-18 · updated 2026-06-17
• Weakness: CWE-89

Description

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.

Affected products

• Ciprianmp phpMyChat Plus: 1.98

References

• https://github.com/J3rryBl4nks/PHPMyChatPlus/blob/master/SQLi.md
• https://github.com/J3rryBl4nks/PHPMyChatPlus/blob/master/SQLi.md

Get alerted when CVE-2020-9265 or the next vulnerability affects your stack