Microsoft Simplechat vulnerabilities
- microsoft simplechat SimpleChat: Stored XSS via group document filename in inline onclick handler 8.7 High
- microsoft simplechat SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport) 8.8 High
- microsoft simplechat SimpleChat plugin validation endpoints missing authentication and authorization 8.6 High
- microsoft simplechat SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints 4.3 Medium