CVE-2024-10055

CVE-2024-10055 affects the WordPress plugin Click to Chat – WP Support All-in-One Floating Widget. It enables Stored Cross-Site Scripting via the wpsaio_snapchat shortcode in all versions up to and including 2.3.3. The vulnerability requires at least contributor-level authentication and allows an...

CVE-2024-49281

The CVE-2024-49281 entry describes a Stored XSS in WordPress plugin Click to Chat – WP Support All-in-One Floating Widget 2.3.3, with 2.3.4 fixing the issue. Other references corroborate similar vulnerability details. If evaluating risk, rely on the official CVSS metrics (CVSS v3.1 base score 5....