WordPress Plugin Vulnerabilities

WP Live Chat Support < 4.1.0 - XSS

Description

The 3CX Live Chat WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
wp-live-chat-support
Fixed in 4.1.0

References

CVE
CVE-2014-10386

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
ae5d5fe1-ac99-40dc-bbed-923a902c6a07

Timeline

Publicly Published
2014-07-20 (about 11 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2021-12-28
Title
Domain Check < 1.0.17 - Reflected Cross-Site Scripting
Published
2025-03-27
Title
The Pack Elementor addons < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-10-18
Title
Team Showcase < 2.2 - Contributor+ Stored XSS
Published
2022-04-18
Title
Slide Anything < 2.3.44 - Editor+ Stored Cross-Site Scripting
Published
2025-05-27
Title
WP Extended < 3.0.16 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload