CVE-2023-2811

The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot

Score

CVSS 3.1 4.8 Medium

Status

Modified - contact@wpscan.com

Published

2023-06-19

Last modified

2024-12-11

Affected products

• Wpbot (Quantumcloud)
• Ai Chatbot (Unknown)

References

• https://wpscan.com/vulnerability/82a81721-0435-45a6-bd5b-dc90186cf803