Lucene search
+L

96 matches found

Patchstack
Patchstack
added 2024/06/13 12:0 a.m.17 views

WordPress Chaty Plugin < 3.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Chaty Type Plugin Vulnerable versions 3.2.3 Fixed in 3.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4149 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 77a371d206e3 Credits Krugov Artyom Required privilege...

6.1CVSS5.7AI score0.00426EPSS
SaveExploits2References4Affected Software1
Patchstack
Patchstack
added 2024/04/24 8:44 a.m.8 views

WordPress Chaty plugin < 3.1.9 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Chaty versions 3.1.9...

3.8CVSS6.1AI score0.00394EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2024/04/24 12:0 a.m.13 views

WordPress Chaty Plugin < 3.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Chaty Type Plugin Vulnerable versions 3.1.9 Fixed in 3.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2972 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID de00cfe54026 Credits Dmitrii Ignatyev Required privilege...

5.7AI score0.00394EPSS
SaveExploits2References4Affected Software1
WPVulnDB
WPVulnDB
added 2023/11/24 12:0 a.m.16 views

Chaty < 3.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings

Description The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.1.2 due to insufficient input sanitization...

5.9CVSS5.9AI score0.00398EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/22 8:15 p.m.6 views

CVE-2023-47759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty plugin = 3.1.2 versions...

4.8CVSS7.3AI score0.00398EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/22 8:15 p.m.30 views

CVE-2023-47759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty chaty allows DOM-Based XSS.This issue affects Chaty: from n/a through = 3.1.2...

5.9CVSS0.00398EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/22 8:15 p.m.22 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty plugin = 3.1.2 versions...

4.3CVSS7.1AI score0.00398EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/22 7:49 p.m.11 views

CVE-2023-47759 WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty chaty allows DOM-Based XSS.This issue affects Chaty: from n/a through = 3.1.2...

5.9CVSS6.6AI score0.00398EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/22 7:49 p.m.85 views

CVE-2023-47759

CVE-2023-47759 describes a Cross-Site Scripting (XSS) issue in the Premio Chaty WordPress plugin, affecting versions

5.9CVSS6.6AI score0.00398EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/22 7:49 p.m.43 views

CVE-2023-47759 WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty chaty allows DOM-Based XSS.This issue affects Chaty: from n/a through = 3.1.2...

5.9CVSS6AI score0.00398EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.7 views

WordPress Plugin Chaty Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Floating Chat Widget:...

5.9CVSS6.3AI score0.00398EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.12 views

PT-2023-30592 · Premio · Premio Chaty Plugin

Name of the Vulnerable Software and Affected Versions: Premio Chaty plugin versions = 3.1.2 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For Premio Chaty plugin versions = 3.1.2, update t...

5.9CVSS5.8AI score0.00398EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/11/13 12:0 a.m.14 views

WordPress Chaty Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Chaty Type Plugin Vulnerable versions = 3.1.2 Fixed in 3.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47759 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f6b69b724ed3 Credits emad Required privilege Administrator Published ...

5.9CVSS6.5AI score0.00398EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2023/08/31 12:0 a.m.21 views

WordPress Chaty Plugin < 3.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:premio:chaty"; ifdescription...

7.1CVSS7AI score0.00401EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/30 12:15 p.m.27 views

CVE-2023-25019

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

7.1CVSS6.2AI score0.00401EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/30 12:15 p.m.5 views

CVE-2023-25019

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

6.1CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/30 12:15 p.m.18 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

5.8CVSS6AI score0.00401EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/30 11:51 a.m.55 views

CVE-2023-25019 WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

7.1CVSS6.4AI score0.00401EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/30 11:51 a.m.47 views

CVE-2023-25019

The CVE-2023-25019 entry concerns the Premio Chaty WordPress plugin. Affected software: Chaty plugin versions up to and including 3.0.9. Vulnerable component: input handling in the plugin that enables unauthenticated, reflected Cross‑Site Scripting (XSS). Root cause and impact are described as un...

7.1CVSS6AI score0.00401EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/30 11:51 a.m.14 views

CVE-2023-25019 WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premio Chaty plugin = 3.0.9 versions...

7.1CVSS5.8AI score0.00401EPSS
SaveExploits0References1
Rows per page
Query Builder