Описание
Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a Stored XSS attack.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.0.9.02 (исключая)
cpe:2.3:a:ai3:qbibot:*:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00321
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
больше 1 года назад
Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a Stored XSS attack.
EPSS
Процентиль: 55%
0.00321
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79