The MxChat AI Chatbot plugin allows administrators to set an introductory message that is stored in the database. The code that handles this setting fails to escape or sanitize the submitted content, leading to a stored cross‑site scripting flaw (CWE‑79). An attacker with administrator or higher permissions can inject arbitrary client‑side scripts that will execute whenever a user loads a page containing the injected message, potentially compromising confidentiality, integrity, and availability of the front‑end interface.

All WordPress installations using the MxChat plugin up to and including version 3.2.10 on multisite networks where the WordPress 'unfiltered_html' setting is disabled are affected. Any user with administrative‑level privileges who can edit plugin settings can create the malicious payload.

The CVSS score of 4.4 reflects that only users with admin privileges can deliver the payload, while the EPSS score of less than 1% indicates a very low probability of public exploitation. The flaw is not listed in the CISA KEV catalog. Nonetheless, the low barrier to attack—just editing a plugin setting—means that sites with weak admin credential hygiene or shared accounts could see accidental or intentional injection, warranting prompt remediation.