CVE-2019-25737

Name of the Vulnerable Software and Affected Versions Live Chat Unlimited version 2.8.3

Description A stored cross-site scripting issue allows unauthenticated attackers to inject malicious scripts via the chat input field. By submitting payloads containing script tags and event handlers, attackers can execute code within the admin area, which may lead to cookie theft or forced redirects to malicious websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.