1469 matches found
CVE-2024-6722 Chatbot Support AI <= 1.0.2 - Admin+ Stored XSS
The Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...
WordPress plugin Chatbot Support AI 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
WordPress Chatbot Support AI Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Chatbot Support AI Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6722 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a3c87b3b7064 Credits Kieran Burge Required...
PT-2024-37900 · WordPress · Chatbot With Chatgpt Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: Chatbot with ChatGPT WordPress plugin versions prior to 2.4.5 Description: The issue concerns improper access controls in the REST Route Handler of the Chatbot with ChatGPT WordPress plugin. This allows an unauthenticated user to purge error...
CVE-2024-6722: Improper Neutralization of Input During Web Page Generation
The Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...
Malicious code in subspace-chatbot-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31bfcf245439a664e6089e8a70261797608614e43d5f4c36abd2cf737a4881d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8089 Malicious code in subspace-chatbot-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31bfcf245439a664e6089e8a70261797608614e43d5f4c36abd2cf737a4881d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in subspace-chatbot-cli
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-6847
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot...
WordPress plugin Chatbot with ChatGPT 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...
CVE-2024-6847: Improper Neutralization of Special Elements used in an SQL Command
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot...
CVE-2024-6843
The SmartSearch WP WordPress plugin, specifically versions
CVE-2024-6843 SmartSearch WP <= 2.4.4 - Unauthenticated Stored XSS
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins...
PT-2024-37901 · WordPress · Chatbot With Chatgpt
Name of the Vulnerable Software and Affected Versions: The Chatbot with ChatGPT WordPress plugin versions prior to 2.4.5 Description: The issue is related to a SQL injection vulnerability. It occurs because the plugin does not properly sanitise and escape a parameter before using it in a SQL...
CVE-2024-6843: Improper Neutralization of Input During Web Page Generation
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins...
WordPress AI Engine: ChatGPT Chatbot Plugin < 2.5.1 is vulnerable to Remote Code Execution (RCE)
Software AI Engine: ChatGPT Chatbot Type Plugin Vulnerable versions 2.5.1 Fixed in 2.5.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-6451 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 16f5f51a51d0 Credits Karolis Narvilas Required...
PT-2024-37898 · WordPress · Chatbot With Chatgpt
Name of the Vulnerable Software and Affected Versions: The Chatbot with ChatGPT WordPress plugin versions prior to 2.4.5 Description: The issue concerns the lack of sanitization and escaping of user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...
X accused of unlawfully using personal data of 60 million+ users to train its AI
In what may come as a surprise to nobody at all, theres been yet another complaint about using social media data to train Artificial Intelligence AI. This time the complaint is against X formerly Twitter and Grok, the conversational AI chatbot developed by Elon Musks company xAI. Grok is a large...
CVE-2024-6498
The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...