WP Live Chat Support <= 8.0.27 Stored Cross-Site Scripting
wp-live-chat-support plugin before 8.0.27 for WordPress contains a reflected cross-site scripting caused by insufficient sanitization in the GDPR page, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires victim to visit a malicious page. References: https://wordpress.org/plugins/wp-live-chat-support/#developers https://blog.sucuri.net/2019/05/persistent-cross-site-scripting-in-wp-live-chat-support-plugin.html https://nvd.nist.gov/vuln/detail/CVE-2019-14950 Remediation: Update to version 8.0.27 or later.
Used 20 times · 10 assets checked · domain, subdomain, ipv4