4.8
Medium
CVE-2024-6498 The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its…
Description
The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Chatbot for WordPress by Collect.chat ⚡️ 2.4 | earliest → < 2.4.4 | 2.4.4 |
| chatbot 2.4 | earliest → < 2.4.4 | 2.4.4 |