Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:ai_chatbot:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductAi Chatbot (a6e92c4f-12d8-5d26-8ff7-33cb89ad6460)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4254 vulnerable 2026-06-08 06:16:11.930479 Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings
The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2023-09-04T11:26:56.873Z
Updated: 2025-04-23T16:18:18.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4253 vulnerable 2026-06-08 06:16:11.928287 Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder
The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2023-09-04T11:26:57.652Z
Updated: 2025-04-23T16:18:10.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3175 vulnerable 2026-06-08 06:09:38.767797 AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting
The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Published: 2023-07-10T12:40:53.443Z
Updated: 2024-11-08T18:22:22.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2811 vulnerable 2026-06-08 06:02:43.042942 AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting
The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot
Published: 2023-06-19T10:52:41.241Z
Updated: 2024-12-11T16:37:52.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2742 vulnerable 2026-06-08 06:02:42.930103 AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting
The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Published: 2023-06-19T10:52:43.675Z
Updated: 2025-04-23T16:20:59.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1660 vulnerable 2026-06-08 05:52:36.466109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1651 vulnerable 2026-06-08 05:52:36.458764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1650 vulnerable 2026-06-08 05:52:36.458245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1649 vulnerable 2026-06-08 05:52:36.457728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1011 vulnerable 2026-06-08 05:52:33.621977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.