Lucene search
PRIOn knowledge basePRION:CVE-2023-2742HistoryJun 19, 2023 - 11:15 a.m.
Cross site scripting
2023-06-1911:15:00
PRIOn knowledge base
www.prio-n.com
3
cross-site scripting
wordpress plugin
settings sanitization
admin privilege
unfiltered_html capability
0.001 Low
EPSS
Percentile
21.5%
The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ai_chatbot | lt | 4.5.5 |
Related
wpvulndb
wpvulndb
AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting
2023-05-22 00:00:00
cve
cve
CVE-2023-2742
2023-06-19 11:15:10
nvd
nvd
CVE-2023-2742
2023-06-19 11:15:10
wpexploit
wpexploit
AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting
2023-05-22 00:00:00
cvelist
cvelist
CVE-2023-2742 AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting
2023-06-19 10:52:43