WordPress JivoChat Live Chat plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in versions of the WordPress JivoChat Live Chat plugi...

PT-2022-13323

Name of the Vulnerable Software and Affected Versions JivoChat Live Chat WordPress plugin versions prior to 1.3.5.4 Description The issue arises from the plugin's failure to properly check CSRF tokens on POST requests to its admin page and its lack of sanitization for certain parameters. This lea...

WordPress plugin JivoChat Live Chat has a vulnerability related to cross-site request forgeing.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in versions of the WordPress JivoChat Live Chat plugi...

CVE-2022-0642: Cross-Site Request Forgery (CSRF)

The JivoChat Live Chat WordPress plugin before 1.3.5.4 does not properly check CSRF tokens on POST requests to the plugins admin page, and does not sanitise some parameters, leading to a stored Cross-Site Scripting vulnerability where an attacker can trick a logged in administrator to inject...