Ritsuy

**Name of the Vulnerable Software and Affected Versions** collectchat versions prior to 2.5.0 **Description** The Chatbot for WordPress by Collect.chat plugin is subject to Stored Cross-Site Scripting (XSS), a flaw where malicious scripts are permanently stored on the target server. This occurs due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts into pages. These scripts execute automatically whenever a user visits the affected page. **Recommendations** Update the plugin to a version newer than 2.4.9.

**Name of the Vulnerable Software and Affected Versions** Make Column Clickable Elementor versions through 1.6.0 **Description** The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages viewed by other users. The issue is a Stored XSS, meaning the malicious script is permanently stored on the target server. **Recommendations** Update Make Column Clickable Elementor to a version later than 1.6.0.