Cross site scripting

The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS...

CVE-2017-18507

CVE-2017-18507 affects the WordPress plugin "wp-live-chat-support" prior to version 7.1.05. The vulnerability is described as a cross-site scripting (XSS) issue in the plugin, allowing an attacker to execute client-side code. The root cause is not explicitly detailed in the provided documents bey...

PT-2019-8442 · WordPress · Wp-Live-Chat-Support

Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 7.1.05 Description: The issue affects the wp-live-chat-support plugin, allowing for cross-site scripting XSS attacks. Recommendations: For versions prior to 7.1.05, update to version 7.1.05 or lat...

CVE-2019-14950

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...

CVE-2019-14950

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...

CVE-2017-18508

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...

CVE-2016-10879

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...

Design/Logic Flaw

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...

Cross site scripting

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...

CVE-2019-14950

The wp-live-chat-support plugin for WordPress is affected by an XSS flaw in the GDPR page for versions prior to 8.0.27. The issue arises from insufficient sanitization, enabling execution of arbitrary scripts in the victim’s browser (per 2019 CVE entry and corroborated by the 2025–2026 connected ...

CVE-2017-18508

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...

CVE-2017-18508

The wp-live-chat-support WordPress plugin is vulnerable to Cross-Site Scripting (XSS) in all versions prior to 7.1.03. The issue stems from improper validation of client-side data, enabling an attacker to execute arbitrary script in a victim’s browser. Remediation: upgrade to version 7.1.03 or la...

CVE-2016-10879

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...

CVE-2016-10879

CVE-2016-10879 concerns the WordPress plugin wp-live-chat-support prior to version 6.2.02, which is reported to be vulnerable to cross-site scripting (XSS). The available connected sources describe the issue as caused by a lack of proper validation of client-side data in the plugin, enabling pote...

PT-2019-13887 · WordPress · Wp-Live-Chat-Support

Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 8.0.27 Description: The issue is related to a security problem where an attacker can exploit the GDPR page to execute malicious scripts, potentially leading to unauthorized access or data theft...

PT-2019-7675 · WordPress · Wp-Live-Chat-Support

Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 6.2.02 Description: The issue is related to a security problem where an attacker can execute malicious scripts. Recommendations: For versions prior to 6.2.02, update to version 6.2.02 or later to...

WordPress WP Live Chat Plugin Arbitrary File Upload (CVE-2019-11185)

An Arbitrary File Upload vulnerability exists in WordPress Live Chat Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the effected system...

WordPress Live Chat Unlimited premium plugin <= 2.8.3 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by m0ze in WordPress Live Chat Unlimited premium plugin versions = 2.8.3. Solution Update the WordPress Live Chat Unlimited premium plugin to the latest available version at least 2.8.4...

WordPress Live Chat Unlimited 2.8.3 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Live Chat Unlimited v2.8.3 Stored XSS Injection Google Dork: inurl:"wp-content/plugins/screets-lcx" Date: 2019/06/25 Exploit Author: m0ze Vendor Homepage: https://screets.com/ Software Link:...

WordPress Plugin Live Chat Unlimited Cross-Site Scripting Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site scripting vulnerability exists in the WordPress plugin Live Chat Unlimited,...