premio Vulnerabilities and Affected Products
Vulnerabilities associated with floating_chat_widget.
Products
Clear product- Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager6 vulnerabilities
- Chaty4 vulnerabilities
- Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce2 vulnerabilities
- Folders Pro2 vulnerabilities
- My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)2 vulnerabilities
- My Sticky Elements2 vulnerabilities
- my_sticky_bar2 vulnerabilities
- Stars Testimonials — Responsive Reviews & Star Ratings2 vulnerabilities
- All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements1 vulnerability
- all_in_one_floating_contact_form_my_sticky_elements1 vulnerability
- Chaty (WordPress plugin)1 vulnerability
- Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty1 vulnerability
- floating_chat_widget1 vulnerability
- folders1 vulnerability
- folders_pro1 vulnerability
- My Sticky Bar1 vulnerability
- Stars Testimonials1 vulnerability
- testimonials1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Floating Chat Widget < 3.1.9 - Editor+ Stored XSSThe Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) CWE-79Apr 24, 2024 | CVSS3.8v3.1 | EPSS0.394% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |