PT-2026-1611 · WordPress · Ai Botkit – Ai Chatbot & Live Support For Wordpress
CVSS v3.1
6.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
AI BotKit – AI Chatbot & Live Support for WordPress plugin versions through 1.1.7
Description
The AI BotKit – AI Chatbot & Live Support for WordPress plugin is susceptible to Stored Cross-Site Scripting. This occurs due to inadequate input sanitization and output escaping in the
ai botkit widget shortcode via the id parameter. Authenticated attackers with Contributor-level access or higher can inject malicious web scripts into pages. These scripts will then execute when a user accesses the compromised page.Recommendations
Versions prior to and including 1.1.7 should be updated.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ai Botkit – Ai Chatbot & Live Support For Wordpress