Medium
CVE-2023-2811
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 281
Reset filters
Medium
CVE-2023-2742
AI ChatBot <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-2719
SupportCandy <= 3.1.6 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-2805
SupportCandy <= 3.1.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-2401
QuBotChat <= 1.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3175
AI ChatBot <= 4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2580
AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable <= 1.6.82 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-32581
WP-Chatbot for Messenger <= 4.7 - Missing Authorization
Medium
CVE-2023-2399
QuBotChat <= 1.1.5 - Unauthenticated Self-Based Cross-Site Scripting
Medium
CVE-2023-23727
Formilla Live Chat <= 1.3.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaID'
Medium
CVE-2023-1011
ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery
Medium
CVE-2023-1651
ChatBot <= 4.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via openai_settings_option_callback
Medium
CVE-2023-1649
AI ChatBot <= 4.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1660
ChatBot <= 4.4.8 - Unauthenticated Stored Cross-Site Scripting in Admin Dashboard
Critical
CVE-2023-1650
ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies
Critical
CVE-2023-1730
SupportCandy <= 3.1.4 - Unauthenticated SQL Injection via parse_user_filters
Medium
b33bf55c-0397-44a2-8c18-ea5f8f1e2ec9
AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback
Medium
07c0b4c5-d76e-4bdc-87d1-3144a1466c77
SupportCandy <= 3.1.3 - Sensitive Data Exposure
Medium
CVE-2022-47613
ChatBot <= 4.3.0 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2023-24415
ChatBot <= 4.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset
Medium
CVE-2023-23981
Conversational Forms for ChatBot <= 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-0405
GPT AI Power <= 1.4.37 - Missing Authorization
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.