CVE · Medium

CVE-2019-14950 — 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.27

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2019-14950 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 8.0.27 8.0.27 2019-05-15

CVE-2019-14950

The 3CX Free Live Chat, Calls & Messaging WordPress plugin before version 8.0.27 contained a stored cross-site scripting vulnerability that could be exploited by unauthenticated attackers to inject malicious scripts into the application.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.