CVE Database /
CVE-2022-4480
CVE · Medium
CVE-2022-4480 — Click to Chat – HoliThemes [click-to-chat-for-whatsapp] < 3.18.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4480
|
Click to Chat – HoliThemes [click-to-chat-for-whatsapp] < 3.18.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 3.18.1
|
3.18.1 |
2022-12-21 |
—
|
CVE-2022-4480
The Click to Chat for WhatsApp plugin by HoliThemes contained a cross-site scripting vulnerability in versions prior to 3.18.1 that could enable attackers to inject and execute malicious scripts on affected websites. These injected scripts could perform various harmful actions including redirects, display unwanted advertisements, and execute arbitrary HTML code when visitors accessed the site. The flaw was discovered by Lana Codes and has been patched in version 3.18.1 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings