The AI ChatBot WordPress plugin... CVE-2023-2742

- AV AC AU C I A
发布: 2023-06-19
修订: 2023-11-07

The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息