Security Advisory
CVE-2024-36679
10
CRITICAL
Vulnerability Description
In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection. Due to a predictable token, the method `Lcp::saveTranslations()` suffer of a white writer that can inject PHP code into a PHP file.
Published Date
June 19, 2024
Official Source
NIST NVD Advisory