medium6.1
CVE-2018-9864
The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.
Impact
The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3cx | Live Chat | before 8.0.06 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/wp-live-chat-support/#developers
- https://www.gubello.me/blog/wp-live-chat-support-8-0-05-stored-xss/
- https://www.youtube.com/watch?v=eHG1pWaez9w
- https://wordpress.org/plugins/wp-live-chat-support/#developers
- https://www.gubello.me/blog/wp-live-chat-support-8-0-05-stored-xss/
- https://www.youtube.com/watch?v=eHG1pWaez9w