CVE-2023-51371: WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating Chat Widget allows Stored XSS.This issue affects Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating Chat Widget: from n/a through 1.1.9.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51371?
CVE-2023-51371 is classified as a medium severity Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2023-51371?
To fix CVE-2023-51371, update the Bit Assist Chat Widget plugin to version 1.1.10 or later.
What software is affected by CVE-2023-51371?
CVE-2023-51371 affects Bitapps Bit Assist versions up to and including 1.1.9 for WordPress.
What type of vulnerability is CVE-2023-51371?
CVE-2023-51371 is an Improper Neutralization of Input During Web Page Generation vulnerability, commonly known as Cross-site Scripting (XSS).
What are the potential impacts of CVE-2023-51371?
Exploitation of CVE-2023-51371 can lead to unauthorized access to session cookies, redirecting users, or executing arbitrary scripts in the context of a user's browser.