premio

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

premio records in CISA KEV

No premio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Chaty 6 records HIGH My Sticky Bar 4 records MEDIUM Floating Chat Widget 3 records MEDIUM Folders 2 records MEDIUM My Sticky Elements 2 records HIGH Mystickymenu 2 records LOW Chaty Pro 1 record LOW Mystickyelements 1 record LOW

Records

3 records in Floating Chat Widget · all components

TI-2024-03862 CVE-2024-4149 · GHSA-jqfc-x264-jw63

Floating Chat Widget < 3.2.3 - Admin+ Stored XSS

MEDIUM 60

The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could allow hi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00426 Published 2024-06-13 Fixed in 3.2.3 CWE-79

TI-2024-02779 CVE-2024-2972 · GHSA-v2xc-vg4h-28jp

Floating Chat Widget < 3.1.9 - Editor+ Stored XSS

MEDIUM 51

The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.1.9 does not sanitise and escape some of its settings, which could allow hi…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00394 Published 2024-04-24 Fixed in 3.1.9 CWE-79

TI-2025-01246 CVE-2025-1450 · GHSA-gp6c-2rqq-qqr8

Cross-site scripting in premio Floating Chat Widget: Contact Chat Icons, Telegram Chat…

LOW 28

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-hover’ parame…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00275 Published 2025-02-27 No fix listed CWE-79

Open these records in search →