CVE-2023-1660 (published 2023-05-08T13:58:05.324Z)
The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to Stored XSS due to the lack of escaping when outputting them in the admin dashboard
Affected products: Vendor: Unknown
Product: AI ChatBot
Versions: 0