WordPress Plugin Vulnerabilities

PHPFreeChat 0.2.8 - lib/csstidy-1.2/css_optimiser.php url Parameter XSS

Description

The phpfreechat WordPress plugin was affected by a lib/csstidy-1.2/css_optimiser.php url Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
phpfreechat
No known fix

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
98c87728-ea5a-4f54-ba17-2962a3a2b381

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2017-11-08
Title
Ultimate Instagram Feed <= 1.3 - Authenticated Cross-Site Scripting (XSS)
Published
2024-11-04
Title
XT Floating Cart for WooCommerce < 2.8.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Published
2024-03-25
Title
WP Poll Maker < 3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Published
2017-09-19
Title
WordPress 4.2.3-4.8.1 - Authenticated Cross-Site Scripting (XSS) in Visual Editor
Published
2024-12-11
Title
Top and footer bars for announcements, notifications, advertisements, promotions – YooBar < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting