Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:57 a.m.2 views

CVE-2023-0899

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high privilege users such as admins...

6.1CVSS5.5AI score0.00218EPSS
Exploits2References1
VulnCheck KEV
VulnCheck KEV
added 2023/11/27 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-1020

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS7.4AI score0.73648EPSS
Exploits2References1
OSV
OSV
added 2023/04/24 7:15 p.m.1 views

CVE-2023-1020

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS7.3AI score0.73648EPSS
Exploits2References1
NVD
NVD
added 2023/04/24 7:15 p.m.7 views

CVE-2023-1020

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS9.8AI score0.73648EPSS
Exploits2References1
Cvelist
Cvelist
added 2023/04/24 6:30 p.m.11 views

CVE-2023-1020 Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLi

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

10AI score0.73648EPSS
Exploits2References1
CVE
CVE
added 2023/04/24 6:30 p.m.45 views

CVE-2023-0899

The CVE-2023-0899 entry concerns the Steveas WP Live Chat Shoutbox WordPress plugin (

6.1CVSS5.9AI score0.00218EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2023/04/24 12:0 a.m.1 views

WordPress plugin Steveas WP Live Chat Shoutbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6.3AI score0.00218EPSS
Exploits2References2
CNNVD
CNNVD
added 2023/04/24 12:0 a.m.1 views

WordPress plugin Steveas WP Live Chat Shoutbox SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Steveas WP Live Chat...

9.8CVSS8.6AI score0.73648EPSS
Exploits2References2
Rows per page
Query Builder