CVE Catalog
CVE-2023-3175
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.51%
39th percentile - higher than 39% of all known CVEs
Summary
The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Risk Assessment
The organization may be exposed to XSS attacks, which could lead to data theft or takeover of accounts with high privileges.
Recommendation
It is recommended to update the AI ChatBot plugin to version 4.6.1 or later to mitigate this vulnerability.
Original NVD description (English source)
The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.