CVE Vulnerabilities

CVE-2023-3041

Published: Jul 17, 2023 | Modified: May 05, 2025
CVSS 3.x
6.1
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.

Affected Software

NameVendorStart VersionEnd Version
Automatic_conversationAutochat*1.1.7 (including)

References