Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ninjateam Component: Click To Chat Clear all filters
TI-2024-09329 CVE-2024-10055 · GHSA-8h9p-x9cm-2cqx

Cross-site scripting in ninjateam WP Click to Chat – Email, Live Chat, Call & Book Now…

Priority LOW 28

The Click to Chat – WP Support All-in-One Floating Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsaio_snapchat shortcode in all versions up to, and including, 2.3.3 due to in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00333 Published 2024-10-18 No fix listed CWE-79
TI-2024-32874 CVE-2024-49281 · GHSA-p83p-59g7-3x89

OS command injection in ninjateam Click to Chat – WP Support All-in-One Floating Widget

Priority LOW 30

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affec…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0055 Published 2024-10-17 No fix listed CWE-78