5.9
Medium
CVE-2023-23981 Auth
Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Conversational Forms for ChatBot 1.1 | earliest → 1.1.6 | No fix stated |
Other CVEs of Conversational Forms for ChatBot
The 6 CVEs of Conversational Forms for ChatBot →
CVE-2026-110886
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms…
9.8
Critical
CVE-2026-95531
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions
8.8
High
CVE-2024-32729
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud…
7.5
High
CVE-2025-22813
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud…
6.5
Medium