Lucene search
+L

29 matches found

CVE
CVE
•added 2012/09/20 10:00 a.m.•88 views

CVE-2011-5181

CVE-2011-5181 : A cross-site scripting vulnerability exists in the WordPress plugin ClickDesk Live Support – Live Chat 2.0, specifically in the clickdesk.php file where the cdwidgetid parameter is not properly sanitized. This allows remote attackers to inject arbitrary scripts/HTML into pages. Im...

4.3CVSS6AI score0.10428EPSS
SaveExploits2References5Affected Software1
Positive Technologies
Positive Technologies
•added 2012/09/20 12:00 a.m.•5 views

PT-2012-2158

Name of the Vulnerable Software and Affected Versions ClickDesk Live Support - Live Chat plugin version 2.0 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter in the clickdesk.php file. This could potentially lead t...

4.3CVSS0.10428EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/20 12:00 a.m.•3 views

CVE-2011-5181: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information...

4.3CVSS6AI score0.10428EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2011/11/27 12:00 a.m.•109 views

Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress clickdesk-live-support-chat plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Www.Aria-security.com/forum/ Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities Download......:...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/11/23 12:00 a.m.•33 views

WordPress Clickdesk Live Support Chat Cross Site Scripting

Www.Aria-security.com/forum/ Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/clickdesk-live-support-chat/ Bug Found.....: http://Aria-Security.Com/forum/ discovery.....: Am!r IrIsT™ contact.......: AmiratIrIsT.i...

SaveExploits0
Patchstack
Patchstack
•added 2011/11/23 12:00 a.m.•33 views

WordPress ClickDesk Live Support Plugin 2.0 - Cross Site Scripting

WordPressClickDesk Live Support plugin's "cdwidget" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker...

4.3CVSS2AI score0.10428EPSS
SaveExploits2References1Affected Software1
exploitpack
exploitpack
•added 2011/11/23 12:00 a.m.•19 views

WordPress Plugin ClickDesk Live Support 2.0 - cdwidget Cross-Site Scripting

WordPress Plugin ClickDesk Live Support 2.0 - cdwidget Cross-Site Scripting source: https://www.securityfocus.com/bid/50778/info ClickDesk Live Support plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

6.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2011/11/23 12:00 a.m.•32 views

WordPress Plugin ClickDesk Live Support 2.0 - 'cdwidget' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50778/info ClickDesk Live Support plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

4.3CVSS5.2AI score0.10428EPSS
SaveExploits2
The Hacker News
The Hacker News
•added 2011/08/20 5:15 a.m.•25 views

Cross Site Scripting Vulnerability at Google Appspot

Cross Site Scripting Vulnerability at Google Appspot The Google Appspot "ClickDesk" login page is vulnerable to Cross Site Scripting attack. Cross Site scripting attack is a critical issue in web application. When an attacker gets a user's browser to execute his/her XSS code, the code will run...

6.5AI score
SaveExploits0
Rows per page
Query Builder