Vulnerability Details CVE-2018-11105
There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to wp-json/wp_live_chat_support/v1/start_chat whenever a malicious attacker would initiate a new chat with an administrator. NOTE: this issue exists because of an incomplete fix for CVE-2018-9864.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.7%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2018-11105
-
cpe:2.3:a:3cx:live_chat:-
-
cpe:2.3:a:3cx:live_chat:1.0
-
cpe:2.3:a:3cx:live_chat:2.0
-
cpe:2.3:a:3cx:live_chat:2.1
-
cpe:2.3:a:3cx:live_chat:2.10
-
cpe:2.3:a:3cx:live_chat:2.2
-
cpe:2.3:a:3cx:live_chat:2.3
-
cpe:2.3:a:3cx:live_chat:2.4
-
cpe:2.3:a:3cx:live_chat:2.5
-
cpe:2.3:a:3cx:live_chat:2.6
-
cpe:2.3:a:3cx:live_chat:2.7
-
cpe:2.3:a:3cx:live_chat:2.8
-
cpe:2.3:a:3cx:live_chat:2.9
-
cpe:2.3:a:3cx:live_chat:3.0
-
cpe:2.3:a:3cx:live_chat:3.01
-
cpe:2.3:a:3cx:live_chat:3.02
-
cpe:2.3:a:3cx:live_chat:3.03
-
cpe:2.3:a:3cx:live_chat:3.04
-
cpe:2.3:a:3cx:live_chat:3.05
-
cpe:2.3:a:3cx:live_chat:3.06
-
cpe:2.3:a:3cx:live_chat:3.07
-
cpe:2.3:a:3cx:live_chat:3.08
-
cpe:2.3:a:3cx:live_chat:4.0
-
cpe:2.3:a:3cx:live_chat:4.0.0
-
cpe:2.3:a:3cx:live_chat:4.0.1
-
cpe:2.3:a:3cx:live_chat:4.0.2
-
cpe:2.3:a:3cx:live_chat:4.1.0
-
cpe:2.3:a:3cx:live_chat:4.1.1
-
cpe:2.3:a:3cx:live_chat:4.1.10
-
cpe:2.3:a:3cx:live_chat:4.1.2
-
cpe:2.3:a:3cx:live_chat:4.1.3
-
cpe:2.3:a:3cx:live_chat:4.1.4
-
cpe:2.3:a:3cx:live_chat:4.1.5
-
cpe:2.3:a:3cx:live_chat:4.1.6
-
cpe:2.3:a:3cx:live_chat:4.1.7
-
cpe:2.3:a:3cx:live_chat:4.1.8
-
cpe:2.3:a:3cx:live_chat:4.1.9
-
cpe:2.3:a:3cx:live_chat:4.2.0
-
cpe:2.3:a:3cx:live_chat:4.2.1
-
cpe:2.3:a:3cx:live_chat:4.2.10
-
cpe:2.3:a:3cx:live_chat:4.2.11
-
cpe:2.3:a:3cx:live_chat:4.2.12
-
cpe:2.3:a:3cx:live_chat:4.2.2
-
cpe:2.3:a:3cx:live_chat:4.2.3
-
cpe:2.3:a:3cx:live_chat:4.2.4
-
cpe:2.3:a:3cx:live_chat:4.2.5
-
cpe:2.3:a:3cx:live_chat:4.2.6
-
cpe:2.3:a:3cx:live_chat:4.2.7
-
cpe:2.3:a:3cx:live_chat:4.2.8
-
cpe:2.3:a:3cx:live_chat:4.2.9
-
cpe:2.3:a:3cx:live_chat:4.3.0
-
cpe:2.3:a:3cx:live_chat:4.3.1
-
cpe:2.3:a:3cx:live_chat:4.3.2
-
cpe:2.3:a:3cx:live_chat:4.3.3
-
cpe:2.3:a:3cx:live_chat:4.3.4
-
cpe:2.3:a:3cx:live_chat:4.3.5
-
cpe:2.3:a:3cx:live_chat:4.4.0
-
cpe:2.3:a:3cx:live_chat:4.4.1
-
cpe:2.3:a:3cx:live_chat:4.4.2
-
cpe:2.3:a:3cx:live_chat:4.4.3
-
cpe:2.3:a:3cx:live_chat:4.4.4
-
cpe:2.3:a:3cx:live_chat:5.0.0
-
cpe:2.3:a:3cx:live_chat:5.0.1
-
cpe:2.3:a:3cx:live_chat:5.0.10
-
cpe:2.3:a:3cx:live_chat:5.0.11
-
cpe:2.3:a:3cx:live_chat:5.0.12
-
cpe:2.3:a:3cx:live_chat:5.0.13
-
cpe:2.3:a:3cx:live_chat:5.0.14
-
cpe:2.3:a:3cx:live_chat:5.0.2
-
cpe:2.3:a:3cx:live_chat:5.0.3
-
cpe:2.3:a:3cx:live_chat:5.0.4
-
cpe:2.3:a:3cx:live_chat:5.0.5
-
cpe:2.3:a:3cx:live_chat:5.0.6
-
cpe:2.3:a:3cx:live_chat:5.0.7
-
cpe:2.3:a:3cx:live_chat:5.0.8
-
cpe:2.3:a:3cx:live_chat:5.0.9
-
cpe:2.3:a:3cx:live_chat:6.0.00
-
cpe:2.3:a:3cx:live_chat:6.0.01
-
cpe:2.3:a:3cx:live_chat:6.0.02
-
cpe:2.3:a:3cx:live_chat:6.0.03
-
cpe:2.3:a:3cx:live_chat:6.0.04
-
cpe:2.3:a:3cx:live_chat:6.0.05
-
cpe:2.3:a:3cx:live_chat:6.0.06
-
cpe:2.3:a:3cx:live_chat:6.0.07
-
cpe:2.3:a:3cx:live_chat:6.1.00
-
cpe:2.3:a:3cx:live_chat:6.1.01
-
cpe:2.3:a:3cx:live_chat:6.1.02
-
cpe:2.3:a:3cx:live_chat:6.2.0
-
cpe:2.3:a:3cx:live_chat:6.2.00
-
cpe:2.3:a:3cx:live_chat:6.2.01
-
cpe:2.3:a:3cx:live_chat:6.2.02
-
cpe:2.3:a:3cx:live_chat:6.2.03
-
cpe:2.3:a:3cx:live_chat:6.2.04
-
cpe:2.3:a:3cx:live_chat:6.2.05
-
cpe:2.3:a:3cx:live_chat:6.2.06
-
cpe:2.3:a:3cx:live_chat:6.2.07
-
cpe:2.3:a:3cx:live_chat:6.2.08
-
cpe:2.3:a:3cx:live_chat:6.2.09
-
cpe:2.3:a:3cx:live_chat:6.2.1
-
cpe:2.3:a:3cx:live_chat:6.2.10
-
cpe:2.3:a:3cx:live_chat:6.2.11
-
cpe:2.3:a:3cx:live_chat:6.2.2
-
cpe:2.3:a:3cx:live_chat:6.2.3
-
cpe:2.3:a:3cx:live_chat:6.2.4
-
cpe:2.3:a:3cx:live_chat:6.2.5
-
cpe:2.3:a:3cx:live_chat:6.2.6
-
cpe:2.3:a:3cx:live_chat:6.2.7
-
cpe:2.3:a:3cx:live_chat:6.2.8
-
cpe:2.3:a:3cx:live_chat:6.2.9
-
cpe:2.3:a:3cx:live_chat:7.0.00
-
cpe:2.3:a:3cx:live_chat:7.0.01
-
cpe:2.3:a:3cx:live_chat:7.0.02
-
cpe:2.3:a:3cx:live_chat:7.0.03
-
cpe:2.3:a:3cx:live_chat:7.0.04
-
cpe:2.3:a:3cx:live_chat:7.0.05
-
cpe:2.3:a:3cx:live_chat:7.0.06
-
cpe:2.3:a:3cx:live_chat:7.0.07
-
cpe:2.3:a:3cx:live_chat:7.0.08
-
cpe:2.3:a:3cx:live_chat:7.1.00
-
cpe:2.3:a:3cx:live_chat:7.1.01
-
cpe:2.3:a:3cx:live_chat:7.1.02
-
cpe:2.3:a:3cx:live_chat:7.1.03
-
cpe:2.3:a:3cx:live_chat:7.1.04
-
cpe:2.3:a:3cx:live_chat:7.1.05
-
cpe:2.3:a:3cx:live_chat:7.1.06
-
cpe:2.3:a:3cx:live_chat:7.1.07
-
cpe:2.3:a:3cx:live_chat:7.1.08
-
cpe:2.3:a:3cx:live_chat:8.0.00
-
cpe:2.3:a:3cx:live_chat:8.0.01
-
cpe:2.3:a:3cx:live_chat:8.0.02
-
cpe:2.3:a:3cx:live_chat:8.0.03
-
cpe:2.3:a:3cx:live_chat:8.0.04
-
cpe:2.3:a:3cx:live_chat:8.0.05
-
cpe:2.3:a:3cx:live_chat:8.0.06
-
cpe:2.3:a:3cx:live_chat:8.0.07