WordPress Chat Plugin <= 1.0.8 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "message" parameter. Solution Update the plugin...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 MESSAGE, 2 EMAIL, or 3 NAME parameter...

ClickDesk 4.3 Cross Site Scripting

ClickDesk Multiple Persistent XSS Details ======================================================================================== Product: ClickDesk a cross platform live chat and support plugin Security-Risk: High Remote-Exploit: yes Vendor-URL: https://www.clickdesk.com/ Advisory-Status:...

MyBB Kingchat Cross Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...

Seditio Chat 1.0 Cross Site Request Forgery

========================================================= Vulnerable Software: Seditio Chat Plugin Chat İndex Plugin v 1.0 http://www.seditio-eklenti.com/page.php?id=418 http://www.seditio-eklenti.com/chat-plugin-index-d418.html Downloaded: http://www.seditio-eklenti.com/datas/users/1-chat.rar MD...