Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist vulnerabilities

Product

Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist

by bitpressadmin · last CVE Feb 15, 2025

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 0High 0Medium 3Low 0

Severity

All severities3 Critical0 High0 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-0822	6.5	1%	Feb 15	Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter Affected: through 1.5.2
CVE-2025-0821	6.5	1%	Feb 14	Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter Affected: through 1.5.2
CVE-2024-13791	4.9	1%	Feb 14	Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function Affected: through 1.5.2