Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Crisp Subscribe
Filtered by product Live Chat
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-43353 1 Crisp 1 Live Chat 2022-01-24 6.8 MEDIUM 8.8 HIGH
The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31.