Cross site scripting

The Querlo Chatbot WordPress plugin through 1.2.4 does not escape or sanitize chat messages, leading to a stored Cross-Site Scripting vulnerability...

CVE-2023-3418

Summary: CVE-2023-3418 corresponds to a stored Cross-Site Scripting (XSS) vulnerability in the Querlo Chatbot WordPress plugin. Concrete details in connected sources show the issue affected Querlo Chatbot WordPress plugin versions up to 1.2.4 (and earlier) and describe that unauthenticated or sub...

Querlo Chatbot <= 1.2.4 - Stored Cross-Site Scripting

The plugin does not escape or sanitize chat messages, leading to a stored Cross-Site Scripting vulnerability. PoC Submit the following in the chat message: """ See the XSS in Querlo...

Querlo Chatbot <= 1.2.4 - Stored Cross-Site Scripting

The plugin does not escape or sanitize chat messages, leading to a stored Cross-Site Scripting vulnerability. Submit the following in the chat message: """ See the XSS in Querlo...