CVE-2020-7239

MEDIUM 6.1CVE-2020-7239 · Published 21/01/2020 · updated 17/06/2026

In short

CVE-2020-7239 is a MEDIUM (CVSS 6.1) vulnerability affecting chatbot with ibm watson (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.1% of all vulnerabilities.
Fix: update to 0.8.21 or later.

Package	Affected versions	Patched versions
chatbot with ibm watson ibm	`< 0.8.21`	`0.8.21`

Description

The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.

References

wordpress.org/plugins/conversation-watson · Third Party Advisory
wpvulndb.com/vulnerabilities/10035 · Third Party Advisory
hooperlabs.xyz/disclosures/cve-2020-7239.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free