WordPress Plugin Vulnerabilities

Chatbot with IBM Watson < 0.8.21 - DOM Cross-Site Scripting (XSS)

Description

Note: The issue could be qualified of Self-XSS.

Affects Plugins

Plugin icon
conversation-watson
Fixed in 0.8.21

References

CVE
CVE-2020-7239
URL
https://www.hooperlabs.xyz/disclosures/cve-2020-7239.php

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Hooper Labs
Verified
No
WPVDB ID
c78938a4-8055-4f6c-9063-4b7d1dd7eda0

Timeline

Publicly Published
2020-01-21 (about 6 years ago)
Added
2020-01-21 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-01-16
Title
Simple Vertical Timeline <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block
Published
2025-01-06
Title
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marketplace' Shortcode
Published
2022-06-20
Title
Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting
Published
2024-04-24
Title
Simple Membership < 4.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode