CVE-2024-6843

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - contact@wpscan.com

Published

2024-08-19

Last modified

2024-08-21

Weaknesses

CWE-79

Affected products

• Chatbot With Chatgpt Wordpress (Unknown)
• Chatbot With Chatgpt (Webdigit)
• Chatbot With Chatgpt Wordpress (Webdigit)

References

• https://wpscan.com/vulnerability/9a5cb440-065a-445a-9a09-55bd5f782e85/