Now officially on WordPress.org

CVE Database / CVE-2019-9913

CVE · Medium

CVE-2019-9913 — 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.18

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2019-9913, CVE-2018-18460 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.18 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 8.0.18 8.0.18 2019-02-05 —

CVE-2019-9913, CVE-2018-18460

The wp-live-chat-support plugin for WordPress versions prior to 8.0.18 contains a cross-site scripting vulnerability in the GDPR settings page accessible through wp-admin/admin.php. An attacker could exploit the term parameter to inject malicious scripts that would execute in the context of an administrator's browser session.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings