CVE-2025-31383

Cross-Site Request Forgery CSRF vulnerability in sodena FrescoChat Live Chat flexytalk-widget allows Stored XSS.This issue affects FrescoChat Live Chat: from n/a through = 3.2.6...

WordPress FrescoChat Live Chat plugin <= 3.2.6 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin FrescoChat Live Chat versions = 3.2.6...

CVE-2025-32624

Missing Authorization vulnerability in czater Czater.pl – live chat i telefon czater allows Cross Site Request Forgery.This issue affects Czater.pl – live chat i telefon: from n/a through = 1.0.5...

CVE-2025-31383

Cross-Site Request Forgery CSRF vulnerability in sodena FrescoChat Live Chat flexytalk-widget allows Stored XSS.This issue affects FrescoChat Live Chat: from n/a through = 3.2.6...

CVE-2025-31383 WordPress FrescoChat Live Chat plugin <= 3.2.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in FrescoChat Live Chat allows Stored XSS. This issue affects FrescoChat Live Chat: from n/a through 3.2.6...

CVE-2025-31383

CVE-2025-31383 (FrescoChat Live Chat) A CSRF in FrescoChat Live Chat (≤3.2.6) can lead to stored XSS. CVSS v3.1 base score 7.1 (HIGH). Patch status in connected docs: Unpatched. Product: FrescoChat Live Chat. Referenced in Wordfence vulnerability coverage; no remediation or exploit details beyond...

CVE-2025-31383 WordPress FrescoChat Live Chat plugin <= 3.2.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in sodena FrescoChat Live Chat flexytalk-widget allows Stored XSS.This issue affects FrescoChat Live Chat: from n/a through = 3.2.6...

CVE-2025-32624 WordPress Czater.pl – live chat i telefon plugin <= 1.0.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Missing Authorization vulnerability in czater Czater.pl – live chat i telefon czater allows Cross Site Request Forgery.This issue affects Czater.pl – live chat i telefon: from n/a through = 1.0.5...

CVE-2025-32624

CVE-2025-32624 (CZATER.pl – live chat i telefon) is a missing authorization vulnerability that enables Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Czater.pl – live chat i telefon. The Wordfence vulnerability entry explicitly associates CVE-2025-32624 with Cza...

WordPress Czater.pl – live chat i telefon plugin <= 1.0.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Czater.pl – live chat i telefon versions = 1.0.5...

WordPress plugin FrescoChat Live Chat 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress plugin Czater.pl live chat i telefon 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2025-26542

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dang Ngoc Binh Zalo Live Chat zalo-live-chat allows Reflected XSS.This issue affects Zalo Live Chat: from n/a through = 1.1.0...

CVE-2025-26542

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dang Ngoc Binh Zalo Live Chat zalo-live-chat allows Reflected XSS.This issue affects Zalo Live Chat: from n/a through = 1.1.0...

CVE-2025-26542

CVE-2025-26542 affects the WordPress Zalo Live Chat plugin up to version 1.1.0. The issue is a Reflected Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. Public records (NVD, Red Hat advisory, CVE list) confirm the fixed/affected details and C...

CVE-2025-26542 WordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dang Ngoc Binh Zalo Live Chat zalo-live-chat allows Reflected XSS.This issue affects Zalo Live Chat: from n/a through = 1.1.0...

CVE-2025-26542 WordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Zalo Live Chat allows Reflected XSS. This issue affects Zalo Live Chat: from n/a through 1.1.0...

WordPress plugin Zalo Live Chat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Zalo Live Chat versions = 1.1.0...

WordPress plugin Pure Chat – Live Chat & More! 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...