cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2021-43353,https://securityvulnerability.io/vulnerability/CVE-2021-43353,Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting,"The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31.",Wordpress,Crisp Live Chat,8.8,HIGH,0.0009800000116229057,false,,false,false,false,,false,false,2022-01-18T16:52:24.000Z,0