CVE-2024-49605

Name of the Vulnerable Software and Affected Versions AVChat Video Chat versions n/a through 2.2

Description A Cross-Site Request Forgery (CSRF) vulnerability is present in AVChat Video Chat, allowing Stored Cross Site Scripting (XSS). This issue enables attackers to perform unauthorized actions on behalf of a user.

Recommendations For versions n/a through 2.2, update to a version above 2.2 to resolve the issue. As a temporary workaround, consider restricting access to sensitive features of AVChat Video Chat to minimize the risk of exploitation.