Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-2399

qubotchat < 1.1.6 - Unauthenticated Stored XSS

Description

The QuBot WordPress plugin before 1.1.6 doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown QuBot

Default version status: unaffected

  • 0 to < 1.1.6affected

References