NA

CVE-2023-2742

Published: 19/06/2023 Updated: 07/11/2023
CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7
VMScore: 0

Vulnerability Summary

The AI ChatBot WordPress plugin prior to 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Vulnerable Product Search on Vulmon Subscribe to Product

quantumcloud ai chatbot