CVE-2024-6847 — SmartSearch WP <= 2.4.4 - Unauthenticated SQLi
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitab…
Published: 2024-08-20 · CVSS: 9.8 · CVSS 3.1
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7