138 matches found
CVE-2014-10386
The vulnerability CVE-2014-10386 affects the WordPress wp-live-chat-support plugin prior to version 4.1.0 and involves JavaScript injections. Affected software: wp-live-chat-support plugin for WordPress. Root cause: improper handling of input allowing injection of JavaScript into the plugin’s con...
CVE-2014-10386: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections...
PT-2019-7062 · WordPress · Wp-Live-Chat-Support
Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 4.1.0 Description: The issue concerns JavaScript injections in the wp-live-chat-support plugin for WordPress. Recommendations: For versions prior to 4.1.0, update to version 4.1.0 or later to...
CVE-2017-18507
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS...
Cross site scripting
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS...
CVE-2017-18507
CVE-2017-18507 affects the WordPress plugin "wp-live-chat-support" prior to version 7.1.05. The vulnerability is described as a cross-site scripting (XSS) issue in the plugin, allowing an attacker to execute client-side code. The root cause is not explicitly detailed in the provided documents bey...
PT-2019-8442 · WordPress · Wp-Live-Chat-Support
Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 7.1.05 Description: The issue affects the wp-live-chat-support plugin, allowing for cross-site scripting XSS attacks. Recommendations: For versions prior to 7.1.05, update to version 7.1.05 or lat...
CVE-2017-18507: Improper Neutralization of Input During Web Page Generation
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS...
CVE-2019-14950
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...
CVE-2019-14950
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...
CVE-2016-10879
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...
Design/Logic Flaw
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...
Cross site scripting
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...
CVE-2019-14950
The wp-live-chat-support plugin for WordPress (versions prior to 8.0.27 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is insufficient sanitization of client-side data within the GDPR page , which allows an attacker to execute arbitrary scripts in the context of the victim's...
CVE-2017-18508
The wp-live-chat-support WordPress plugin is vulnerable to Cross-Site Scripting (XSS) in all versions prior to 7.1.03. The issue stems from improper validation of client-side data, enabling an attacker to execute arbitrary script in a victim’s browser. Remediation: upgrade to version 7.1.03 or la...
CVE-2017-18508
The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...
CVE-2016-10879
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...
CVE-2016-10879
CVE-2016-10879 concerns the WordPress plugin wp-live-chat-support prior to version 6.2.02, which is reported to be vulnerable to cross-site scripting (XSS). The available connected sources describe the issue as caused by a lack of proper validation of client-side data in the plugin, enabling pote...
PT-2019-7675 · WordPress · Wp-Live-Chat-Support
Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 6.2.02 Description: The issue is related to a security problem where an attacker can execute malicious scripts. Recommendations: For versions prior to 6.2.02, update to version 6.2.02 or later to...