Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

WordPress plugin 'The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button'

before 3.2.3

Floating Chat Widget: Contact Chat Icons WordPress plugin

before 3.2.3

Source

contact@wpscan.com

CVE-2024-4149 details

Published : June 13, 2024, 6:15 a.m.
Last Modified : June 13, 2024, 6:36 p.m.

Description

The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://wpscan.com/vulnerability/0256ec2a-f1a9-4110-9978-ee88f9e24237/	contact@wpscan.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-4149