Product Referenceproduct
https://codecanyon.net/item/wordpress-live-chat-plugin/3952877 CVE-2019-25737
MEDIUM
Live Chat Unlimited 2.8.3 Stored Cross-Site Scripting
Record summary
CVE-2019-25737 has a selected CVSS score of 5.3 (medium); EIP currently links 1 catalogued exploit.
Description
Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the chat input field. Attackers can submit payloads containing script tags and event handlers that execute in the admin area, enabling cookie theft or forced redirects to malicious websites.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 11, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Live Chat UnlimitedBrowse Screets / Live Chat Unlimited | CVE List | 2.8.3 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin Live Chat Unlimited 2.8.3 - Cross-Site ScriptingExploitDB exploitby m0zeNot analyzed1 file
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-25737 Official Product Homepageproduct
https://screets.com/ ExploitDB-47037exploit
https://www.exploit-db.com/exploits/47037 VulnCheck Advisory: Live Chat Unlimited 2.8.3 Stored Cross-Site ScriptingThird-party advisory
https://www.vulncheck.com/advisories/live-chat-unlimited-stored-cross-site-scripting