Beveiligingsadvies

CVE-2022-3415

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-14 00:00:00
Laatst bijgewerkt 2025-04-30 19:31:45
Toegewezen door WPScan
CVSS-score 6.1
Status PUBLISHED

Beschrijving

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message