Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:44 p.m.5 views

CVE-2022-2361

The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks...

4.8CVSS5.8AI score0.00494EPSS
Exploits1References1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.6 views

WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severit...

6.4AI score0.00284EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/08/22 3:15 p.m.1 views

CVE-2022-2361

The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks...

4.8CVSS5.9AI score0.00494EPSS
Exploits1References2
NVD
NVD
added 2022/08/22 3:15 p.m.8 views

CVE-2022-2361

The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks...

4.8CVSS0.00494EPSS
Exploits1References1
Prion
Prion
added 2022/08/22 3:15 p.m.19 views

Cross site scripting

The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks...

4.3CVSS4.8AI score0.00494EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/22 3:1 p.m.52 views

CVE-2022-2361 Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting

The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks...

5AI score0.00494EPSS
Exploits1References1
CVE
CVE
added 2022/08/22 3:1 p.m.59 views

CVE-2022-2361

CVE-2022-2361 affects the WP Social Chat WordPress plugin prior to version 6.0.5. The root cause is insufficient sanitization/escaping of certain plugin settings, which can allow stored cross-site scripting (XSS) by high-privilege users such as administrators. The issue is mitigated by upgrading ...

4.8CVSS4.8AI score0.00494EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/22 12:0 a.m.1 views

WordPress plugin WP Social Chat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS5.1AI score0.00494EPSS
Exploits1References2
Patchstack
Patchstack
added 2022/07/26 12:0 a.m.16 views

WordPress WP Social Chat plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Raad Haddad in WordPress WP Social Chat plugin versions = 6.0.4. Solution Update the WordPress WP Social Chat plugin to the latest available version at least 6.0.5...

4.8CVSS2AI score0.00494EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.6 views

WordPress Floating Contact Form & Social Chat for WordPress – SupportBubble plugin <= 1.3.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Floating Contact Form & Social Chat for WordPress – SupportBubble plugin versions = 1.3.3. Solution No patched version available...

2.5AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.7 views

WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin <= 1.7.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin versions = 1.7.0. Solution Update the WordPress Go Viral – social share, social sharebar, social locker,...

2.9AI score
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/10/09 12:0 a.m.2 views

Sheng Zhang-Slice App has Denial of Service Vulnerability

Moment is a social chat app. A denial-of-service vulnerability exists in the Zhangsheng-Slice Moment app, which can be exploited by an attacker to cause a running app application to crash...

6.8AI score
Exploits0
Rows per page
Query Builder