| Package | Affected versions | Patched versions |
|---|---|---|
| jivochat | < 1.3.5.4 | 1.3.5.4 |
The JivoChat Live Chat WordPress plugin before 1.3.5.4 does not properly check CSRF tokens on POST requests to the plugins admin page, and does not sanitise some parameters, leading to a stored Cross-Site Scripting vulnerability where an attacker can trick a logged in administrator to inject arbitrary javascript.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free