Showing 1 vulnerability on this page for wp_live_chat_shoutbox

Signals CISA KEV Ransomware Nuclei
wp_live_chat_shoutbox_project vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLi

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CWE-89Apr 24, 20231 related artifact
CVSS9.8v3.1EPSS4.99%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX