Lucene search
José AguileraPATCHSTACK:DD304EDB266AA670A58DD3BFEF32AE72HistoryDec 16, 2021 - 12:00 a.m.
WordPress Crisp Live Chat plugin <= 0.31 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2021-12-1600:00:00
José Aguilera
patchstack.com
14
0.001 Low
EPSS
Percentile
41.9%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by José Aguilera in WordPress Crisp Live Chat plugin (versions <= 0.31).
Solution
Update the WordPress Crisp Live Chat plugin to the latest available version (at least 0.32).
Related
cvelist
cvelist
cve
cve
CVE-2021-43353
2022-01-18 17:15:09
cnvd
cnvd
WordPress Crisp Live Chat plugin cross-site scripting vulnerability
2022-01-21 00:00:00
nvd
nvd
CVE-2021-43353
2022-01-18 17:15:09
prion
prion
Cross site request forgery (csrf)
2022-01-18 17:15:00
wpvulndb
wpvulndb
Crisp Live Chat < 0.32 - CSRF to Stored Cross-Site Scripting
2021-12-16 00:00:00