HighCVSS 10.0
EPSS 1.7%
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors.