Crisp

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Crisp records in CISA KEV

No Crisp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crisp 2 records MEDIUM

Records

2 records in Crisp · all components

TI-2021-19326 CVE-2021-43353 · GHSA-mrwr-9wqr-6fc2

Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting

MEDIUM 41

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attac…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00608 Published 2022-01-18 No fix listed CWE-352

TI-2024-18566 CVE-2024-27963 · GHSA-r8h7-q43f-c88r

WordPress Crisp – Live Chat and Chatbot plugin <= 0.44 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crisp allows Stored XSS.This issue affects Crisp: from n/a through 0.44.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-03-21 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0