Lucene search
+L

27 matches found

Patchstack
Patchstack
added 2025/02/14 1:31 p.m.12 views

WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by luc Patchstack in WordPress Plugin Chaty Pro versions = 3.3.3...

10CVSS7AI score0.00607EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2022/06/20 12:00 a.m.15 views

WordPress Chaty Pro Plugin < 2.8.2 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

6.1CVSS6.3AI score0.01798EPSS
SaveExploits2References2
OSV
OSV
added 2022/01/03 1:15 p.m.10 views

CVE-2021-25016

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.01798EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/01/03 1:15 p.m.4 views

CVE-2021-25016

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.01798EPSS
SaveExploits2References3
Prion
Prion
added 2022/01/03 1:15 p.m.20 views

Cross site scripting

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

4.3CVSS6AI score0.01798EPSS
SaveExploits2References1Affected Software2
CNNVD
CNNVD
added 2022/01/03 12:00 a.m.13 views

WordPress plugin Chaty 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Chaty versions prior to 2.8.3 and WordPress...

6.1CVSS4.9AI score0.01798EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2021/12/06 12:00 a.m.37 views

WordPress Chaty Pro premium plugin <= 2.8.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Chaty Pro premium plugin versions = 2.8.1. Solution Update the WordPress Chaty Pro premium plugin to the latest available version at least 2.8.2...

6.1CVSS2.1AI score0.01798EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder