Input validation vulnerability in Re:amaze Helpdesk & Live Chat 1.2.5

The Re:amaze Helpdesk & Live Chat plugin for WordPress is not secure in versions up to, and including, 1.2.5. This is because it does not properly check the data it receives, or prevent malicious code from running when it is displayed. This could allow someone with the correct permissions to add malicious code to the website. This issue only affects WordPress websites that have multiple sites or have disabled the ability to add arbitrary HTML code.

Detected in:

Re:amaze Helpdesk & Live Chat fixed vulnerable versions: >= * <= 1.2.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.