CVE-2019-25737 MEDIUM

CVE-2019-25737: Live Chat Unlimited 2.8.3 Stored Cross-Site Scripting

Vendor Screets
Product Live Chat Unlimited
Weakness CWE-79 · XSS
Published June 4, 2026
Last update June 11, 2026

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the chat input field. Attackers can submit payloads containing script tags and event handlers that execute in the admin area, enabling cookie theft or forced redirects to malicious websites.

Key dates

02Disclosure timeline

June 4, 2026 CVE published
June 11, 2026 Record updated