6.1
Medium
CVE-2024-6843 The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow…
Description
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Chatbot with ChatGPT WordPress 2.4 | earliest → < 2.4.5 | 2.4.5 |
| chatbot_with_chatgpt_wordpress 2.4 | earliest → 2.4.4 | No fix stated |
Other CVEs of Chatbot with ChatGPT WordPress
The 4 CVEs of Chatbot with ChatGPT WordPress →
CVE-2024-6845
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint,…
5.3
Medium
CVE-2024-6846
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an…
5.3
Medium
CVE-2024-6847
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it…
9.8
Critical