2 matches found
CVE-2024-22880: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component...
4.7CVSS6.5AI score0.00284EPSS
SaveExploits1References1
PT-2025-11175
Name of the Vulnerable Software and Affected Versions: Zadarma Zadarma extension version 1.0.11 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the webchat component. This is a Cross Site Scripting vulnerability. Recommendations: For Zadarma Zadar...
4.7CVSS0.00284EPSS
SaveExploits1References6
20