CVE-2023-24415

Cross-Site Request Forgery CSRF vulnerability in QuantumCloud AI ChatBot plugin = 4.2.8 versions...

CVE-2023-24415

Cross-Site Request Forgery CSRF vulnerability in QuantumCloud AI ChatBot plugin = 4.2.8 versions...

CVE-2023-24415

CVE-2023-24415 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress ChatBot/QuantumCloud AI ChatBot plugin versions <= 4.2.8. The NVD entry details a high-impact issue (CVSS v3.1: 8.8, HIGH) with network attack vector, no privileges required, user interaction required, ...

WordPress ChatBot Plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software ChatBot Type Plugin Vulnerable versions = 4.2.8 Fixed in 4.2.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24415 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 56586a24f6dd Credits Rafshanzani Suhada Required...