Vulnerabilities

TI-2024-18566 CVE-2024-27963 · GHSA-r8h7-q43f-c88r

WordPress Crisp – Live Chat and Chatbot plugin <= 0.44 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crisp allows Stored XSS.This issue affects Crisp: from n/a through 0.44.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-03-21 No fix listed CWE-79

TI-2021-19326 CVE-2021-43353 · GHSA-mrwr-9wqr-6fc2

Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting

MEDIUM 41

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attac…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00608 Published 2022-01-18 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Crisp – Live Chat and Chatbot plugin <= 0.44 - Cross Site Scripting (XSS) vulnerability

Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting