PT-2023-24718 · WordPress · Querlo Chatbot

Published 2023-07-17 · Updated 2024-03-22 · CVE-2023-3418

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Querlo Chatbot WordPress plugin versions 1.2.4 and earlier

Description The Querlo Chatbot WordPress plugin has a stored Cross-Site Scripting issue due to not escaping or sanitizing chat messages.

Recommendations For Querlo Chatbot WordPress plugin versions 1.2.4 and earlier, update to a version that addresses the stored Cross-Site Scripting vulnerability.

Exploit

Related Identifiers

CVE-2023-3418

Affected Products

Querlo Chatbot

References · 3

• 🔥 https://wpscan.com/vulnerability/407edb21-8fcb-484a-babb-fce96a6aede7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3418 · Security Note
• https://t.me/cibsecurity/66819 · Telegram Post