Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
2 selected

2 records

Vendor: Qudata Component: Qubot Clear all filters
TI-2023-02254 CVE-2023-2399 · GHSA-c7gm-fhwg-2jph

qubotchat < 1.1.6 - Unauthenticated Stored XSS

Priority MEDIUM 60

The QuBot WordPress plugin before 1.1.6 doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2023-06-19 Fixed in 1.1.6
TI-2023-02256 CVE-2023-2401 · GHSA-5h7g-65vf-ggfp

Qubotchat < 1.1.6 – Admin+ Stored XSS

Priority LOW 22

The QuBot WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-06-19 Fixed in 1.1.6