Stored Cross-Site Scripting Vulnerability in ArtiBot Free Chat Bot Plugin for WordPress

CVE-2024-0449

What is CVE-2024-0449?

The ArtiBot Free Chat Bot for WordPress plugin contains a vulnerability that allows authenticated users with administrator-level permissions to conduct stored cross-site scripting attacks. Due to inadequate input sanitization and output escaping within the admin settings, these users can inject malicious scripts into pages. Consequently, these scripts execute whenever a user visits an affected page. This issue primarily affects multi-site installations and those configurations where unfiltered_html is disabled, exposing users to potential data theft and compromised session integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References