CVE-2023-4254

Summary

CVE-2023-4254 is a vulnerability affecting the AI ChatBot WordPress plugin before version 4.7.8. This issue permits high privilege users, including admins, to execute Stored Cross-Site Scripting attacks, bypassing the unfiltered_html capability restriction. The plugin fails to sanitize and escape certain settings, making it susceptible to malicious code injection. In multisite setups, this issue could pose a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.