Lucene search
+L

27 matches found

NVD
NVD
added 2022/11/14 3:15 p.m.16 views

CVE-2022-3415

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message...

6.1CVSS0.00526EPSS
SaveExploits2References1
OSV
OSV
added 2022/11/14 3:15 p.m.4 views

CVE-2022-3415

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message...

6.1CVSS5.8AI score0.00526EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/11/14 12:0 a.m.24 views

CVE-2022-3415 Chat Bubble < 2.3 - Unauthenticated Stored Cross-Site Scripting

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message...

6.1AI score0.00526EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2022/11/14 12:0 a.m.5 views

CVE-2022-3415 Chat Bubble < 2.3 - Unauthenticated Stored Cross-Site Scripting

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message...

6.1AI score0.00526EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.5 views

PT-2022-22023 · WordPress · Chat Bubble

Name of the Vulnerable Software and Affected Versions: Chat Bubble WordPress plugin versions prior to 2.3 Description: The issue allows unauthenticated attackers to set Stored Cross-Site Scripting payloads in some contact parameters, which will trigger when an admin views the related contact...

6.1CVSS6.4AI score0.00526EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2022/11/14 12:0 a.m.7 views

WordPress plugin Chat Bubble 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.1CVSS6AI score0.00526EPSS
SaveExploits2References3
Patchstack
Patchstack
added 2022/10/18 12:0 a.m.21 views

WordPress Chat Bubble plugin <= 2.2 - Unauth. Stored Cross-Site Scripting (XSS) vulnerability

Unauth. Stored Cross-Site Scripting XSS vulnerability discovered by Juampa Rodríguez in WordPress Chat Bubble plugin versions = 2.2. Solution Update the WordPress Chat Bubble plugin to the latest available version at least 2.3...

6.1CVSS1.9AI score0.00526EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder