Threats tagged 'ghsa-hrm6-3q32-jhwc'

The ArtiBot Free Chat Bot for WebSites plugin for WordPress contains a reflected cross-site scripting (XSS) vulnerability via PostMessage in all versions up to and including 1.1.7. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts. Exploitation requires tricking a user into performing an action such as clicking a crafted link. The vulnerability has a medium severity rating with a CVSS score of 6.1.