CVE-2023-5241

Summary

CVE-2023-5241 is a directory traversal vulnerability affecting the AI ChatBot plugin for WordPress. This issue, present in versions up to 4.8.9 and 4.9.2, allows subscriber-level attackers to manipulate the qcld_openai_upload_pagetraining_file function. By appending "<?php" to an existing file, attackers can inject malicious code, leading to potential Denial of Service (DoS) attacks, particularly when targeting critical files like wp-config.php.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.