WordPress Plugin Vulnerabilities

WP Live Chat Support < 1.7.03 - XSS

Description

The 3CX Live Chat WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
wp-live-chat-support
Fixed in 1.7.03

References

CVE
CVE-2017-18508

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
eaef7049-c487-47ce-986d-a05f052f0b9a

Timeline

Publicly Published
2017-07-10 (about 8 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-07-17
Title
Multiple DeoThemes Themes - Reflected Cross-Site Scripting
Published
2024-03-15
Title
The Moneytizer < 9.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-02-24
Title
Contact Form 7 Star Rating <= 1.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Published
2014-11-07
Title
Contact Form Clean & Simple <= 4.4.0 - Cross-Site Scripting (XSS)
Published
2020-07-08
Title
Monalisa < 2.1.3 - Unauthenticated Reflected Cross-Site Scripting (XSS)