Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up
Prestashop

livechatpro

2 Versions 1 CVE

Versions

8.4.0

SEMANTIC 1 CVE

0

SINGLE_NUMBER 1 CVE

Recent CVEs

CVE-2024-36679

In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection. Due to a predictable token, the method `Lcp::saveTranslations()` suffer of a white writer that can inject PHP code into a PHP file.

CRITICAL Jun 19, 2024