CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chatra Chatra Live Chat + ChatBot + Cart Saver allows Stored XSS. This issue affects Chatra Live Chat + ChatBot + Cart Saver: from n/a through 1.0.11.
Explanation of Vulnerability in Simple Terms
Chatra Live Chat versions up to 1.0.11 contain a cross-site scripting vulnerability that allows authenticated users to disrupt service availability. An attacker with low-level account access can inject malicious input that causes the application to become unavailable to other users. The vulnerability requires network access and an existing user account but no additional user interaction.
What an attacker can do
Disrupt service availability for other users through malicious input injection.
Potential impact on your site
Users may experience service interruptions or unavailability caused by authenticated attackers.
Conditions required to exploit
Attacker must have a low-privilege user account; network access to the application.
Key dates
External resources
Related vulnerabilities
