medium4.7
CVE-2024-22880
Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webch…
Impact
Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zadarma | Zadarma | through 1.0.16 |