Lucene search
CVE-2017-18507
XSS vulnerability in wp-live-chat-support plugin for WordPress
Show more
| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | Cross site scripting | 13 Aug 201917:15 | – | prion |
 | WP Live Chat Support < 7.1.05 - Cross-Site Scripting (XSS) | 30 Jul 201700:00 | – | wpvulndb |
 | CVE-2017-18507 | 13 Aug 201917:15 | – | nvd |
 | WP Live Chat Support < 7.1.05 - Cross-Site Scripting (XSS) | 30 Jul 201700:00 | – | wpexploit |
 | CVE-2017-18507 | 13 Aug 201916:34 | – | cvelist |
| Source | Link |
|---|---|
| wordpress | www.wordpress.org/plugins/wp-live-chat-support/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| chat_message | request body | /wp-live-chat-support | The wp-live-chat-support plugin is vulnerable to XSS via chat messages that can execute arbitrary JavaScript. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo13 Aug 2019 17:15Current
6.4Medium risk
Vulners AI Score6.4
CVSS24.3
CVSS36.1
EPSS0.0021