WordPress Xelion Webchat plugin <= 9.1.0 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by LVT-tholv2k in WordPress Plugin Xelion Webchat versions = 9.1.0...

CVE-2024-22880

Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component...

CVE-2024-22880

Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component...

CVE-2024-22880

A Cross-Site Scripting (XSS) vulnerability exists in the Zadarma Zadarma extension version 1.0.11 . This flaw allows a remote attacker to execute arbitrary code by sending a crafted script to the webchat component . As a mitigation, it is recommended to disable the webchat component until a patch...

CVE-2024-22880: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component...

CVE-2024-22880

Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component...

CVE-2024-22880

Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component...

Malicious code in seller-webchat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b68c2b24c603c8d9041a3cd7aeefed0ea836500df679a24bc061241fec376a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11088 Malicious code in seller-webchat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b68c2b24c603c8d9041a3cd7aeefed0ea836500df679a24bc061241fec376a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11087 Malicious code in seller-webchat-build-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b3dfd5d6ff1c62c4de5dec773047aa8b80fe5ccaa84cc4e2ab8d35b7eedebe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-build-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b3dfd5d6ff1c62c4de5dec773047aa8b80fe5ccaa84cc4e2ab8d35b7eedebe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ea4f9c784e3e3c7d5f98a2c973d3f87e15ae439cdd4fe1b46362551a22772cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11004 Malicious code in seller-webchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ea4f9c784e3e3c7d5f98a2c973d3f87e15ae439cdd4fe1b46362551a22772cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 024c0618a42ed68bfdd63a4e68af72dfe7cdcb55d521bc3b167770c757388465 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efe3ed359ac7762158b5f9007e341ccb501278d1259683e98786cdde66e56a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10810 Malicious code in seller-webchat-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08c36430d0f111cf5379d4566cc13f5b904dbfcb91a51e28ae64199874c5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08c36430d0f111cf5379d4566cc13f5b904dbfcb91a51e28ae64199874c5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9217 Malicious code in botframework-webchat-cldr-data-downloader (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 069cec738fcd016cead066052e66581ac130f721c6454d3079b1d054381031e8 Any computer that has this package installed or running...

Malicious code in botframework-webchat-cldr-data-downloader (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 069cec738fcd016cead066052e66581ac130f721c6454d3079b1d054381031e8 Any computer that has this package installed or running...

Malicious code in hawaii-webchat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e497f5fb91bf8ac9ccd93a1fe5ae711c55468a84503de1c8152803c3039e70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...