PT-2023-22679 · WordPress · Autochat Automatic Conversation

Rafael B · Published 2023-07-17 · Updated 2023-07-26 · CVE-2023-3041

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Autochat Automatic Conversation WordPress plugin versions 1.1.7 and earlier

Description The issue is related to the lack of sanitization and escaping of user input before it is outputted back on the page. This leads to a cross-site scripting attack.

Recommendations For Autochat Automatic Conversation WordPress plugin versions 1.1.7 and earlier, update to a version that properly sanitizes and escapes user input to prevent cross-site scripting attacks.

Exploit

Fix

Related Identifiers

CVE-2023-3041

Affected Products

Autochat Automatic Conversation

References · 4

• 🔥 https://wpscan.com/vulnerability/93cad990-b6be-4ee1-9cdf-0211a7fe6c96 · Exploit
• https://osv.dev/vulnerability/CVE-2023-3041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3041 · Security Note
• https://t.me/cibsecurity/66822 · Telegram Post