8016 matches found
CVE-2020-5642
Cross-site request forgery CSRF vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2020-5642
The CVE-2020-5642 entry concerns the WordPress plugin Live Chat - Live support (versions 3.1.0 and earlier). The vulnerability is a Cross-Site Request Forgery (CSRF) that can allow remote attackers to hijack administrator authentication via unspecified vectors, potentially enabling unintended ope...
CVE-2020-5642
Cross-site request forgery CSRF vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2020-25824
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...
CVE-2020-25824
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...
Code injection
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...
WordPress Plugin "Live Chat - Live support" vulnerable to cross-site request forgery
Overview WordPress Plugin "Live Chat - Live support" provided by onWebChat contains a cross-site request forgery vulnerability CWE-352. Yusuke Fukuda of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University reported this vulnerability to the...
Quick Chat <= 4.14 - Authenticated Stored Cross-Site Scripting
An Authenticated Persistent XSS vulnerability is present in the the plugin options page /wp-admin/options-general.php?page=quick-chat/quick-chat.php, vulnerable fields: «Chat name prefix for guest users», «Advertisement code for your AdSense». The PoC will be displayed once the issue has been...
Quick Chat <= 4.14 - Unauthenticated Stored Cross-Site Scripting
An Unauthenticated Persistent XSS vulnerability was discovered in the Quick Chat plugin v4.14 for WordPress. PoC The PoC will be displayed once the issue has been remediated...
WordPress Live Chat - Live support plugin <= 3.1.0 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Yusuke Fukuda Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University in WordPress Live Chat - Live support plugin versions = 3.1.0. Solution Update the WordPress Live Chat - Live support plugi...
WordPress Quick Chat plugin <= 4.14 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Ex.Mi in WordPress Quick Chat plugin versions = 4.14. Solution 2020-12-03 - no patched version, only note from WordPress plugin repository "This plugin has been closed as of October 13, 2020 and is not available for download. Th...
JVN#92404841: WordPress Plugin "Live Chat – Live support" vulnerable to cross-site request forgery
WordPress Plugin "Live Chat - Live support" provided by onWebChat contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious web page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the...
Quick Chat <= 4.14 - Authenticated Stored Cross-Site Scripting
An Authenticated Persistent XSS vulnerability is present in the the plugin options page /wp-admin/options-general.php?page=quick-chat/quick-chat.php, vulnerable fields: «Chat name prefix for guest users», «Advertisement code for your AdSense». PoC The PoC will be displayed once the issue has been...
Live Chat - Live support < 3.2.0 - Cross-Site Request Forgery
The plugin was affected by a Cross-Site Request Forgery issue, which may allow attackers to change some of the settings. It also appears that some Authenticated Cross-Site Scripting issues have been fixed, which could be used along with the CSRF to perform Stored XSS attacks...
Sheng Zhang-Slice App has Denial of Service Vulnerability
Moment is a social chat app. A denial-of-service vulnerability exists in the Zhangsheng-Slice Moment app, which can be exploited by an attacker to cause a running app application to crash...
CVE-2020-26135
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...
CVE-2020-26135
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...
CVE-2020-26134
Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode...