CVE-2017-18508

Description

References

• wordpress.org/plugins/wp-live-chat-support · Release Notes
• wpvulndb.com/vulnerabilities/9719 · Third Party Advisory

More vulnerabilities in live chat

• CVE-2019-12498CRITICAL 9.8The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check pr…
• CVE-2014-10386MEDIUM 6.1The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.
• CVE-2017-18507MEDIUM 6.1The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.
• CVE-2019-14950MEDIUM 6.1The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.
• CVE-2016-10879MEDIUM 6.1The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.