AVChat Video Chat <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
medium
The Community Lite Video Chat plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to inject malicious JavaScript into the database gra...
- CVSS:
- 6.1
- Affected:
- up to 2.2
- Fix:
- No patched version reported
- Disclosed:
- Oct 18, 2024
CVE-2024-49605 on NVD →
Community Lite Video Chat < 1.4.2 - Reflected Cross-Site Scripting
medium
The Community Lite Video Chat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘FB_appId’ and ‘movie_param’ parameters in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
- CVSS:
- 6.1
- Affected:
- up to 1.4.1
- Fixed in:
- 1.4.2
- Disclosed:
- Jul 7, 2014
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database