6.1
Moyenne
CVE-2024-6843 The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow…
Description
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Chatbot with ChatGPT WordPress 2.4 | premières → < 2.4.5 | 2.4.5 |
| chatbot_with_chatgpt_wordpress 2.4 | premières → 2.4.4 | Pas de correctif indiqué |
Autres CVE de Chatbot with ChatGPT WordPress
Les 4 CVE de Chatbot with ChatGPT WordPress →
CVE-2024-6845
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint,…
5.3
Moyenne
CVE-2024-6846
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an…
5.3
Moyenne
CVE-2024-6847
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it…
9.8
Critique