9.8
Critique
CVE-2024-6847 The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it…
Description
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Chatbot with ChatGPT WordPress 2.4 | premières → < 2.4.5 | 2.4.5 |
| chatbot_with_chatgpt_wordpress 2.4 | premières → < 2.4.5 | 2.4.5 |
Autres CVE de Chatbot with ChatGPT WordPress
Les 4 CVE de Chatbot with ChatGPT WordPress →
CVE-2024-6845
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint,…
5.3
Moyenne
CVE-2024-6846
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an…
5.3
Moyenne
CVE-2024-6843
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow…
6.1
Moyenne