6.1
Medium
CVE-2023-3041 The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before…
Description
The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Autochat Automatic Conversation 1.1 | earliest → 1.1.7 | No fix stated |