cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2023-5740,https://securityvulnerability.io/vulnerability/CVE-2023-5740,Stored Cross-Site Scripting in Live Chat with Facebook Messenger Plugin for WordPress,"The Live Chat with Facebook Messenger plugin for WordPress exposes users to a Stored Cross-Site Scripting (XSS) vulnerability through its 'messenger' shortcode. This issue arises from inadequate input sanitization and output escaping on user-supplied attributes, enabling authenticated attackers with contributor-level permissions and above to inject arbitrary web scripts. These scripts execute upon page access, potentially compromising user data and site integrity. It is crucial for site administrators to update to secure versions and implement best practices for input validation.",Wordpress,Live Chat with Facebook Messenger,5.4,MEDIUM,0.0007200000109151006,false,,false,false,false,,false,false,2023-10-25T18:17:00.000Z,0