Lucene search
K

95 matches found

NVD
NVD
added 2026/05/28 6:16 a.m.13 views

CVE-2026-9644

The LiveSmart Video Chat Live Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livesmartwidget' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS0.00032EPSS
Exploits0References2
CVE
CVE
added 2026/05/28 5:30 a.m.11 views

CVE-2026-9644

The CVE pertains to the LiveSmart Video Chat WordPress plugin, affecting versions up to 1.2. The root cause is insufficient input sanitization and output escaping for attributes used by the livesmart_widget shortcode. This enables Stored Cross-Site Scripting where an attacker with contributor-lev...

6.4CVSS6AI score0.00032EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/05/27 5:15 p.m.5 views

WordPress LiveSmart Video Chat Live Video Chat plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin LiveSmart Video Chat Live Video Chat versions = 1.2...

6.4CVSS5.8AI score0.00032EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/05/26 8:24 a.m.7 views

EUVD-2026-31806

Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey Site: from n/a through 7.3.23...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References1
CVE
CVE
added 2026/03/21 3:26 a.m.5 views

CVE-2026-1253

The CVE concerns the WordPress plugin Group Chat & Video Chat by AtomChat. A missing capability check in the AJAX handlers atomchat_update_auth_ajax and atomchat_update_layout_ajax affects all versions up to and including 1.1.7. This allows authenticated users with Subscriber-level access and abo...

4.3CVSS5.8AI score0.00084EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-0920

Malware in sbrugna...

1.9CVSS6.4AI score0.0005EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-2268

Malware in sbrugna...

4.3CVSS6.4AI score0.01188EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4624

Malware in sbrugna...

7.5CVSS7.6AI score0.0011EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-2269

Malware in sbrugna...

7.5CVSS6.4AI score0.00279EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-43468

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.0019EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:29 p.m.4 views

CVE-2022-44567

A command injection vulnerability exists in Rocket.Chat-Desktop 3.8.14 that could allow an attacker to pass a malicious url of openInternalVideoChatWindow to shell.openExternal, which may lead to remote code execution internalVideoChatWindow.tsL17. To exploit the vulnerability, the internal video...

9.8CVSS7.3AI score0.05876EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:41 a.m.4 views

CVE-2024-49605

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

7.1CVSS5.9AI score0.0019EPSS
Exploits0References1
NVD
NVD
added 2024/10/20 10:15 a.m.9 views

CVE-2024-49605

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

7.1CVSS0.0019EPSS
Exploits0References1
OSV
OSV
added 2024/10/20 10:15 a.m.2 views

CVE-2024-49605

Cross-Site Request Forgery CSRF vulnerability in Avchat.Net AVChat Video Chat allows Stored XSS.This issue affects AVChat Video Chat: from n/a through 2.2...

6.1CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2024/10/20 10:6 a.m.47 views

CVE-2024-49605

CVE-2024-49605 (WordPress Community Lite Video Chat plugin

7.1CVSS5.9AI score0.0019EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/20 10:6 a.m.15 views

CVE-2024-49605 WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

7.1CVSS0.0019EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/20 10:6 a.m.11 views

CVE-2024-49605 WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

7.1CVSS5.9AI score0.0019EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/20 12:0 a.m.2 views

PT-2024-33560 · Unknown · Avchat Video Chat

Name of the Vulnerable Software and Affected Versions: AVChat Video Chat versions n/a through 2.2 Description: A Cross-Site Request Forgery CSRF vulnerability is present in AVChat Video Chat, allowing Stored Cross Site Scripting XSS. This issue enables attackers to perform unauthorized actions on...

7.1CVSS6.8AI score0.0019EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/10/20 12:0 a.m.1 views

WordPress plugin AVChat Video Chat 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS6.5AI score0.0019EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/10/18 10:19 a.m.2 views

WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin AVChat Video Chat versions = 2.2...

7.1CVSS6.2AI score0.0019EPSS
Exploits0Affected Software1
Rows per page
Query Builder