Read the docs

premio

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

premio records in CISA KEV

No premio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chaty 6 records HIGH My Sticky Bar 4 records MEDIUM Floating Chat Widget 3 records MEDIUM Folders 2 records MEDIUM My Sticky Elements 2 records HIGH Mystickymenu 2 records LOW Chaty Pro 1 record LOW Mystickyelements 1 record LOW

Records

1 record in Chaty Pro · all components

TI-2021-07294 CVE-2021-25016 · GHSA-5jw4-xcrp-43f8

Chaty < 2.8.3 - Reflected Cross-Site Scripting

Priority LOW 31

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scri…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01846 Published 2022-01-03 Fixed in 2.8.3, 2.8.2 CWE-79
Open these records in search →