Read the docs

Wp Live Chat Shoutbox Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Live Chat Shoutbox Project records in CISA KEV

No Wp Live Chat Shoutbox Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Live Chat Shoutbox 2 records HIGH

Records

2 records in Wp Live Chat Shoutbox · all components

TI-2023-00965 CVE-2023-1020 · GHSA-cg84-ggcf-mxg7

Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLi

Priority HIGH 82

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injecti…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04949 Published 2023-04-24 No fix listed
TI-2023-00851 CVE-2023-0899 · GHSA-jvcm-h57m-rqjp

Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated Stored XSS

Priority MEDIUM 60

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-04-24 No fix listed
Open these records in search →