CVE-2023-3175 (published 2023-07-10T12:40:53.443Z)
The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected products: Vendor: Unknown
Product: AI ChatBot
Versions: 0