6.5
Medium
CVE-2024-49281 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ninja Team…
Description
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through <= 2.3.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Click to Chat – WP Support All-in-One Floating Widget 2.3 | earliest → 2.3.3 | No fix stated |
| Click to Chat – WP Support All-in-One Floating Widget 2.3 | earliest → 2.3.3 | No fix stated |