CVE-2026-66636

Wise Chat versions up to 3.4 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by other users. This vulnerability poses a medium risk, as it can lead to unauthorized actions or data exposure for users interacting with the affected chat application. Organizations using Wise Chat should prioritize patching or upgrading to mitigate potential exploitation risks.