Search vulnerabilities

Results 1

Export CSV
CVE-2024-36679

In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection. Due to a predictable token, the method `Lcp::saveTranslations()` suffer of a white writer that can inject PHP code into a PHP file.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Products