CVE-2021-36846

Description

References

• patchstack.com/database/vulnerability/chaty/wordpress-chaty-plugin-2-8-3-authenticated-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/chaty · Product

Autres vulnérabilités de chaty

• CVE-2023-47759MOYENNE 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premio Chaty chaty allows DOM-Based XS…
• CVE-2023-25019MOYENNE 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premio Chaty plugin <= 3.0.9 versions
• CVE-2023-3245MOYENNE 4.8The Floating Chat Widget WordPress plugin before 3.1.2 does not sanitise and escape some of its settings, which could allow high privilege u…
• CVE-2022-3858ÉLEVÉE 7.2The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin before 3.0.3 does not pr…
• CVE-2021-25016MOYENNE 6.1The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before o…