5.9
Moyenne
CVE-2024-34380 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud Conversational Forms for ChatBot allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through 1.2.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Conversational Forms for ChatBot 1.2 | premières → 1.2.0 | Pas de correctif indiqué |
Autres CVE de Conversational Forms for ChatBot
Les 6 CVE de Conversational Forms for ChatBot →
CVE-2026-110886
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms…
9.8
Critique
CVE-2026-95531
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions
8.8
Élevée
CVE-2024-32729
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud…
7.5
Élevée
CVE-2025-22813
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud…
6.5
Moyenne