CVE-2023-3041

MediumCVSS 6.1

Published: 17/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

31th percentile - higher than 31% of all known CVEs

Summary

The Autochat Automatic Conversation plugin for WordPress versions up to 1.1.7 does not sanitize and escape user input before outputting it back on the page, leading to a cross-site scripting attack.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update the plugin to the latest version that fixes this vulnerability and to review and sanitize user input data.

Original NVD description (English source)

The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.