CVE-2024-22880: Zadarma

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component.

Affected products

• Zadarma Zadarma: up to and including 1.0.16

Published 2025-03-13. Last modified 2026-06-17.