CVE-2025-15266

CVE-2025-15266 refers to the WordPress plugin GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation. It describes a Stored XSS in the chat message field across versions up to 1.1.7 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers ...

CVE-2025-15266: Improper Neutralization of Input During Web Page Generation

The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the chat message field in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possibl...

PT-2026-2822

Name of the Vulnerable Software and Affected Versions GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress versions through 1.1.7 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output...