Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8pg-hrp7-6jch

Опубликовано: 05 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

EPSS

Процентиль: 45%
0.00223
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 1 года назад

The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

EPSS

Процентиль: 45%
0.00223
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79