A vulnerability was found in Ciprianmp phpMyChat Plus 1.98. It has been declared as critical. The affected element is an unknown function of the file deluser.php. Such manipulation of the argument pmc_username leads to sql injection.

This vulnerability is traded as CVE-2020-37151. The attack may be launched remotely. Furthermore, there is an exploit available.