Zadarma
1 CVEs
product
Monthly
Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
RCE
XSS
Zadarma
NVD
GitHub
CVSS 3.1
4.7
EPSS
0.1%
EPSS 0%
CVSS 4.7
MEDIUM
POC
This Month
Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
RCE
XSS
Zadarma
NVD
GitHub