Unscored CVE-2017-2187 EUVD-2017-11370GHSA-cm6c-3gpv-26fp

Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script o…

Published Jun 9, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Code Cabin Product: WP Live Chat Support

Description

Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
CODECABIN_	WP Live Chat Support	prior to version 7.0.07	—

References

https://plugins.trac.wordpress.org/changeset/1658232/
JVN#70951878 third-party-advisory