The JivoChat Live Chat WordPress plugin before 1.3.5.4 does not properly check CSRF tokens on POST requests to the plugins admin page, and does not sanitise some parameters, leading to a stored Cross-Site Scripting vulnerability where an attacker can
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0642
133 hits since 2022-05-31
PHP Vulns Source Ratio: 17% (6764 total, 571 propagated, 3382 filtered)