Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Vendor: Wp Live Chat Shoutbox Project Clear all filters
TI-2023-00965 CVE-2023-1020 · GHSA-cg84-ggcf-mxg7

Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLi

Priority HIGH 82

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injecti…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04949 Published 2023-04-24 No fix listed
TI-2023-00851 CVE-2023-0899 · GHSA-jvcm-h57m-rqjp

Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated Stored XSS

Priority MEDIUM 60

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-04-24 No fix listed