Approved changes feed: RSS · Atom

cpe:2.3:a:prestashop:livechatpro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPrestashop (236a7260-6e18-5f0f-b33a-a013be210d8c)
ProductLivechatpro (d6270a9d-1240-5890-b605-cd90a3a9f258)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36679 vulnerable 2026-06-03 14:56:05.019561 Details available
In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection. Due to a predictable token, the method `Lcp::saveTranslations()` suffer of a white writer that can inject PHP code into a PHP file.
Published: 2024-06-19T00:00:00.000Z
Updated: 2024-08-02T03:37:05.342Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.