CVE-2021-43353

Published: 2022-01-18T17:15Z

Last Modified: 2025-02-14T16:07Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt