Description
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Chatbot with ChatGPT WordPress | < 2.4.5 | 2.4.5 |
References
- https://wpscan.com/vulnerability/9a5cb440-065a-445a-9a09-55bd5f782e85/ exploit vdb-entry technical-description