Read the docs

Qudata

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Qudata records in CISA KEV

No Qudata vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qubot 2 records MEDIUM

Records

2 records in Qubot · all components

TI-2023-02254 CVE-2023-2399 · GHSA-c7gm-fhwg-2jph

qubotchat < 1.1.6 - Unauthenticated Stored XSS

Priority MEDIUM 60

The QuBot WordPress plugin before 1.1.6 doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2023-06-19 Fixed in 1.1.6
TI-2023-02256 CVE-2023-2401 · GHSA-5h7g-65vf-ggfp

Qubotchat < 1.1.6 – Admin+ Stored XSS

Priority LOW 22

The QuBot WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-06-19 Fixed in 1.1.6
Open these records in search →