CVE-2023-2811 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the AI ChatBot WordPress plugin prior to version 4.5.6. This medium-severity vulnerability (CVSS 4.8) allows high-privileged users, such as administrators, to inject malicious scripts into chatbot settings due to insufficient sanitization. Successful exploitation could impact all administrators viewing the chatbot settings and all clients interacting with the chatbot, leading to information disclosure or defacement. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.5.6CPE matchmatch criteria | cpe:2.3:a:quantumcloud:wpbot:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.