Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4423

Malicious code in bioql PyPI...

10CVSS9AI score0.00133EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/24 4:21 p.m.8 views

CVE-2025-26776

Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3...

10CVSS8.8AI score0.00133EPSS
Exploits0References1
NVD
NVD
added 2025/02/22 4:15 p.m.15 views

CVE-2025-26776

Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3...

10CVSS0.00133EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/22 3:52 p.m.16 views

CVE-2025-26776 WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3...

10CVSS0.00133EPSS
Exploits0References1
CVE
CVE
added 2025/02/22 3:52 p.m.93 views

CVE-2025-26776

CVE-2025-26776 affects WordPress Chaty Pro plugin versions n/a through 3.3.3. The root cause is an Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a Web Shell to the web server. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) indicates a remote, unauthent...

10CVSS8.8AI score0.00133EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/22 3:52 p.m.45 views

CVE-2025-26776 WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3...

10CVSS8.8AI score0.00133EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/22 12:0 a.m.4 views

PT-2025-7614 · Unknown · Notfound Chaty Pro

Name of the Vulnerable Software and Affected Versions: Chaty Pro versions n/a through 3.3.3 Description: The issue affects Chaty Pro, allowing an attacker to upload malicious files that can be used to take control of a website. This is due to an Unrestricted Upload of File with Dangerous Type...

10CVSS9.5AI score0.00133EPSS
Exploits0References19
CNNVD
CNNVD
added 2025/02/22 12:0 a.m.2 views

WordPress plugin Chaty Pro 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS8.8AI score0.00133EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/02/14 1:31 p.m.4 views

WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by luc Patchstack in WordPress Plugin Chaty Pro versions = 3.3.3...

10CVSS7AI score0.00133EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2022/06/20 12:0 a.m.10 views

WordPress Chaty Pro Plugin < 2.8.2 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

6.1CVSS6.3AI score0.15671EPSS
Exploits2References2
OSV
OSV
added 2022/01/03 1:15 p.m.0 views

CVE-2021-25016

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2022/01/03 1:15 p.m.11 views

Cross site scripting

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

4.3CVSS6AI score0.15671EPSS
Exploits2References1Affected Software2
CNNVD
CNNVD
added 2022/01/03 12:0 a.m.1 views

WordPress plugin Chaty 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Chaty versions prior to 2.8.3 and WordPress...

6.1CVSS4.9AI score0.15671EPSS
Exploits2References2
Patchstack
Patchstack
added 2021/12/06 12:0 a.m.26 views

WordPress Chaty Pro premium plugin <= 2.8.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Chaty Pro premium plugin versions = 2.8.1. Solution Update the WordPress Chaty Pro premium plugin to the latest available version at least 2.8.2...

6.1CVSS2.1AI score0.15671EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder