CVE-2025-1450: Stored XSS Vulnerability in Floating Chat Widget for WordPress - Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty Plugin (up to Version 3.3.5)
A new vulnerability, identified as CVE-2025-1450, has been discovered in the Floating Chat Widget – Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call
CVE-2024-2321 - Bypassing API Access Security in WSO2 Using Just a Refresh Token
---
WSO2 is a popular platform used by businesses and developers to manage APIs, identity, and access. If you’re running WSO2 API Manager, Identity
CVE-2025-20116 - Stored XSS Vulnerability in Cisco APIC Web UI – Deep Dive, Exploit, and Prevention
CVE-2025-20116 is a newly identified stored Cross-Site Scripting (XSS) vulnerability in the Cisco APIC web UI. This weakness allows an authenticated attacker (someone with admin
CVE-2025-26529 - How Insufficient Log Sanitization Can Lead to Stored XSS Vulnerabilities
In early 2025, a new vulnerability named CVE-2025-26529 was discovered affecting various web-based applications with site administration panels. This vulnerability revealed that information displayed in
CVE-2024-4028 - Keycloak Admin Console Vulnerability Enables Privileged XSS Attacks
_Keycloak_ is a widely-used open-source identity and access management solution, trusted by developers for securing applications. In June 2024, a new critical vulnerability—CVE-2024-4028—was
Episode
00:00:00
00:00:00