CVE-2020-7239

The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2020-01-21

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Chatbot With Ibm Watson (Ibm)

References

• https://wordpress.org/plugins/conversation-watson/#developers
• https://wpvulndb.com/vulnerabilities/10035
• https://www.hooperlabs.xyz/disclosures/cve-2020-7239.php