Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.6%	CVE-2024-36679livechatpro · n/a Critical10.0EPSS 0.6%2024-06-19CVE Database V5CVE-2024-36679 In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection. Due to a predictable token, the method `Lcp::saveTranslations()` suffer of a white writer that can inject PHP code into a PHP file. EPSS 0.6%Vulnerability	CVE Database V5	2024-06-19

Page 1 of 1