CVE-2024-6498
Aug. 5, 2024, 12:41 p.m.
Tags
Product(s) Impacted
Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin
- before 2.4.4
Description
The Chatbot for WordPress by Collect.chat ?? WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Weaknesses
Date
Published: Aug. 5, 2024, 6:16 a.m.
Last Modified: Aug. 5, 2024, 12:41 p.m.
Status : Undergoing Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
contact@wpscan.com
References
https://wpscan.com/
contact@wpscan.com