CVE-2018-18460
XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request.
Source: CVE.org
CVE · Medium
CVE-2018-18460 — 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.18
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2018-18460 | 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 8.0.18 | 8.0.18 | 2018-10-17 | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.