Skip to content
Sign in
6.5 Medium

CVE-2025-31092 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team Click…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through <= 2.3.4.

Affected products and versions

Product Affected versions Fixed in
Click to Chat – WP Support All-in-One Floating Widget 2.3 earliest → 2.3.4 No fix stated

Other CVEs of Click to Chat – WP Support All-in-One Floating Widget

The 2 CVEs of Click to Chat – WP Support All-in-One Floating Widget →
CVE-2024-49281 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ninja Team… 6.5 Medium
Track this CVE