Files
CVEs-PoC/2022/CVE-2022-3415.md
T
2025-09-29 21:09:30 +02:00

945 B

CVE-2022-3415

Description

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message

POC

Reference

Github