title: AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting
description: The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
vendor: Unknown
product: AI ChatBot
versions:
status: affected, versionType: custom, version: 0, lessThan: 4.5.6
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}