Lucene search
PRIOn knowledge basePRION:CVE-2022-0642HistoryMay 30, 2022 - 9:15 a.m.
Cross site scripting
2022-05-3009:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
21.3%
The JivoChat Live Chat WordPress plugin before 1.3.5.4 does not properly check CSRF tokens on POST requests to the plugins admin page, and does not sanitise some parameters, leading to a stored Cross-Site Scripting vulnerability where an attacker can trick a logged in administrator to inject arbitrary javascript.
Related
wpvulndb
wpvulndb
JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRF
2022-05-09 00:00:00
wpexploit
wpexploit
JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRF
2022-05-09 00:00:00
cve
cve
CVE-2022-0642
2022-05-30 09:15:08
patchstack
patchstack
nvd
nvd
CVE-2022-0642
2022-05-30 09:15:08
cvelist
cvelist
CVE-2022-0642 JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRF
2022-05-30 08:35:35