CVE-2023-5691

Summary

CVE-2023-5691: The Chatbot for WordPress plugin, version 2.3.9, is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This issue arises due to insufficient input sanitization and output escaping in the admin settings. Attackers, with administrator-level permissions, can exploit this vulnerability to inject malicious web scripts into pages. The risk is heightened for multi-site installations and those with unfiltered_html disabled. Users are advised to upgrade to the latest plugin version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.