2 matches found
CVE-2024-0898: Improper Neutralization of Input During Web Page Generation
The Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This mak...
4.8CVSS5.9AI score0.00398EPSS
SaveExploits0References3
PT-2024-15902
Name of the Vulnerable Software and Affected Versions The Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back plugin for WordPress versions up to, and including, 2.3 Description The issue is related to Stored Cross-Site Scripting via admin settings du...
4.8CVSS0.00398EPSS
SaveExploits0References6
20