CVE-2023-1650

CVE-2023-1650: ChatBot < 4.4.7 - Unauthenticated PHP Object Injection

Vendor Unknown
Product AI ChatBot
Published May 8, 2023
Last update February 4, 2025

CVSS base score

What the vulnerability does

01Description

The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP Object Injection when a suitable gadget is present on the blog

Key dates

02Disclosure timeline

May 8, 2023 CVE published
February 4, 2025 Record updated