23 matches found
CVE-2025-11829
The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the five9-chat shortcode in all versions up to, and including, 1.1.2. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
EUVD-2025-60970
The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the five9-chat shortcode in all versions up to, and including, 1.1.2. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-11829
The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the five9-chat shortcode in all versions up to, and including, 1.1.2. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-11829
CVE-2025-11829 relates to the Five9 Live Chat plugin for WordPress. The WordPress plugin versions through 1.1.2 are vulnerable to Stored Cross-Site Scripting via the toolbar attribute in the [five9-chat] shortcode, due to insufficient input sanitization and output escaping. The Wordfence report (...
CVE-2025-11829 Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the five9-chat shortcode in all versions up to, and including, 1.1.2. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-11829 Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the five9-chat shortcode in all versions up to, and including, 1.1.2. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
WordPress Five9 Live Chat plugin <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Five9 Live Chat versions = 1.1.2...
PT-2025-46254
Name of the Vulnerable Software and Affected Versions Five9 Live Chat plugin for WordPress versions through 1.1.2 Description The Five9 Live Chat plugin for WordPress is susceptible to Stored Cross-Site Scripting through the toolbar attribute within the five9-chat shortcode. This occurs because o...
WordPress plugin Five9 Live Chat 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
EUVD-2018-7385
Malware in sbrugna...
EUVD-2018-7386
Malware in sbrugna...
CVE-2018-15508
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
CVE-2018-15508
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
Design/Logic Flaw
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhoneissue 1 of 2...
Five9 Agent Desktop Plus Access Control Error Vulnerability
Five9 Agent Desktop Plus is a suite of cloud-based contact center software from Five9 USA. An access control error vulnerability exists in Five9 Agent Desktop Plus version 10.0.70. A remote attacker could exploit the vulnerability to execute code...
CVE-2018-15509
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control issue 2 of 2...
CVE-2018-15509
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control issue 2 of 2...
Improper access control
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control issue 2 of 2...
CVE-2018-15509
Five9 Agent Desktop Plus 10.0.70 is affected by an Incorrect Access Control vulnerability (CVE-2018-15509). Multiple connected records (CNVD-2019-07887) describe an access control error in Five9 Agent Desktop Plus, with CNVD noting a remote attacker could execute code. NVD data corroborates the C...
CVE-2018-15508
Summary: CVE-2018-15508 affects Five9 Agent Desktop Plus 10.0.70, where an incorrect access control allows a remote attacker to cause a denial of service by opening a connection on port 8083 to a device running the Five9 SoftPhone. The NVD entry documents the issue with a network-based vector and...