Read the docs

3CX

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

3CX records in CISA KEV

No 3CX vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Live Chat 13 records MEDIUM 3cx 12 records HIGH 3cx Web Server 3 records LOW Phone System 3 records LOW Phone System Firmware 2 records MEDIUM Call Flow Designer 1 record LOW Crm Template Generator 1 record LOW

Records

13 records in Live Chat · all components

TI-2018-08921 CVE-2018-12426 · GHSA-rm79-mfx6-crmj

The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to…

Priority MEDIUM 50

The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remote_upload request wi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05062 Published 2018-07-02 No fix listed CWE-434
TI-2017-01487 CVE-2017-2187 · GHSA-cm6c-3gpv-26fp

Cross-site scripting in Code Cabin Inc WP Live Chat Support

Priority LOW 30

Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01293 Published 2017-06-09 No fix listed CWE-79
TI-2018-07887 CVE-2018-11105 · GHSA-8qw3-4qpj-p88r

There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for…

Priority LOW 29

There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to wp-json/wp_live_chat_support/v1/start_chat w…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0106 Published 2018-05-15 No fix listed CWE-79
Open these records in search →