Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: premio Component: Floating Chat Widget Clear all filters
TI-2025-01246 CVE-2025-1450 · GHSA-gp6c-2rqq-qqr8

Cross-site scripting in premio Floating Chat Widget: Contact Chat Icons, Telegram Chat…

Priority LOW 28

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-hover’ parame…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00275 Published 2025-02-27 No fix listed CWE-79
TI-2024-03862 CVE-2024-4149 · GHSA-jqfc-x264-jw63

Floating Chat Widget < 3.2.3 - Admin+ Stored XSS

Priority MEDIUM 60

The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could allow hi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00426 Published 2024-06-13 Fixed in 3.2.3 CWE-79
TI-2024-02779 CVE-2024-2972 · GHSA-v2xc-vg4h-28jp

Floating Chat Widget < 3.1.9 - Editor+ Stored XSS

Priority MEDIUM 51

The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.1.9 does not sanitise and escape some of its settings, which could allow hi…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00394 Published 2024-04-24 Fixed in 3.1.9 CWE-79