CVE-2019-14950 PoC — WordPress wp-live-chat-support插件跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14950.yaml

Associated Vulnerability

Title: WordPress wp-live-chat-support插件跨站脚本漏洞 (CVE-2019-14950)
Description:The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.

Description

wp-live-chat-support plugin before 8.0.27 for WordPress contains a reflected cross-site scripting caused by insufficient sanitization in the GDPR page, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires victim to visit a malicious page.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →