Lucene search
WpvulndbWPVDB-ID:B8341A4D-4473-41F6-9819-D06E0F78DA41HistoryNov 23, 2023 - 12:00 a.m.
AI ChatBot < 4.9.1 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file
2023-11-2300:00:00
wpscan.com
12
ai chatbot
wordpress
directory traversal
file write
vulnerability
version 4.9.2
qcld_openai_upload_pagetraining_file
subscriber-level attackers
Description The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_openai_upload_pagetraining_file function. This allows subscriber-level attackers to append "
Related
nvd
nvd
CVE-2023-5241
2023-10-19 06:15:11
CVE-2023-5646
2023-10-20 02:15:08
cvelist
cvelist
CVE-2023-5241
2023-10-19 05:34:10
cve
cve
CVE-2023-5241
2023-10-19 06:15:11
CVE-2023-5646
2023-10-20 02:15:08
prion
prion
Directory traversal
2023-10-19 06:15:00
zdt
zdt
packetstorm
packetstorm
WordPress AI ChatBot 4.8.9 SQL Injection / Traversal / File Deletion
2023-10-26 00:00:00
wordfence
wordfence
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.0%
Related for WPVDB-ID:B8341A4D-4473-41F6-9819-D06E0F78DA41