CVE-2023-23727

CVE-2023-23727 is a Stored XSS vulnerability in the WordPress plugin Live Chat by Formilla (Formilla Live Chat) affecting versions up to 1.3. The issue arises from inadequate input sanitization in the admin-facing settings, enabling an authenticated attacker (admin+) to inject scripts. Impact is ...

WordPress Live Chat by Formilla – Real-time Chat & Chatbots Plugin Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Live Chat by Formilla – Real-time Chat & Chatbots Plugin Type Plugin Vulnerable versions = 1.3 Fixed in 1.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23727 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...