CVE-2024-12457

The Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escapi...

CVE-2024-12457

The Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escapi...

CVE-2024-12457

creationtimestamp| type| source ---|---|--- 2025-01-07 04:38:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/322 2025-01-07 05:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vi3p6zx2f 2025-01-07 07:10:05+00:00| seen|...

CVE-2024-12457

CVE-2024-12457 : In the WordPress plugin “Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode” there is a Stored Cross‑Site Scripting vulnerability via the plugin shortcode ‘vchat’, affecting all versions up to 1.7.2 (per initial description). Exploitation ...