Description
The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot
Published: 2023-06-19
Score: 4.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-34264 The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot
History

Mon, 12 May 2025 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Quantumcloud wpbot
CPEs cpe:2.3:a:quantumcloud:ai_chatbot:*:*:*:*:*:wordpress:*:* cpe:2.3:a:quantumcloud:wpbot:*:*:*:*:*:wordpress:*:*
Vendors & Products Quantumcloud ai Chatbot
Quantumcloud wpbot

Wed, 11 Dec 2024 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Quantumcloud Wpbot
cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2024-12-11T16:37:52.886Z

Reserved: 2023-05-19T13:17:23.743Z

Link: CVE-2023-2811

cve-icon Vulnrichment

Updated: 2024-08-02T06:33:05.966Z

cve-icon NVD

Status : Modified

Published: 2023-06-19T11:15:10.763

Modified: 2025-05-12T15:09:58.850

Link: CVE-2023-2811

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.