CVE-2024-49281

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through <= 2.3.3.

Score

CVSS 3.1 6.5 Medium

Status

Modified - audit@patchstack.com

Published

2024-10-17

Last modified

2026-04-28

Weaknesses

CWE-78

Affected products

• Click To Chat Wp Support All-in-one Floating Widget (Ninja Team)
• Click To Chat (Ninjateam)

References

• https://patchstack.com/database/Wordpress/Plugin/support-chat/vulnerability/wordpress-click-to-chat-wp-support-all-in-o…