CVE-2017-18508

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...

CVE-2017-18508

The wp-live-chat-support WordPress plugin is vulnerable to Cross-Site Scripting (XSS) in all versions prior to 7.1.03. The issue stems from improper validation of client-side data, enabling an attacker to execute arbitrary script in a victim’s browser. Remediation: upgrade to version 7.1.03 or la...