Userlike – WordPress Live Chat plugin [userlike] < 2.3
unknown
[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Voswinkel Userlike – WordPress Live Chat plugin <= 2.2 versions.
- Affected:
- up to 2.3
- Fixed in:
- 2.3
- Disclosed:
- May 9, 2023
CVE-2023-23734 on NVD →
Userlike <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The Userlike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web...
- CVSS:
- 4.4
- Affected:
- up to 2.2
- Fixed in:
- 2.3
- Disclosed:
- Mar 21, 2023
CVE-2023-23734 on NVD →
Userlike – WordPress Live Chat plugin [userlike] < 2.3
unknown
The Userlike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web...
- Affected:
- up to 2.3
- Fixed in:
- 2.3
- Disclosed:
- Mar 21, 2023
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database