CVE-2021-43353

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisppluginsettingspage function found in the /crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31...

PT-2022-11827

Name of the Vulnerable Software and Affected Versions Crisp Live Chat WordPress plugin versions up to, and including 0.31 Description The issue is related to Cross-Site Request Forgery due to missing nonce validation via the crisp plugin settings page function found in the /crisp.php file. This...