CVE-2020-7239

MEDIO 6.1CVE-2020-7239 · Published 21/01/2020 · updated 17/06/2026

In breve

CVE-2020-7239 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda chatbot with ibm watson (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.1% delle vulnerabilità.
Correzione: aggiornare a 0.8.21 o successiva.

Package	Affected versions	Patched versions
chatbot with ibm watson ibm	`< 0.8.21`	`0.8.21`

Description

The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.

References

wordpress.org/plugins/conversation-watson · Third Party Advisory
wpvulndb.com/vulnerabilities/10035 · Third Party Advisory
hooperlabs.xyz/disclosures/cve-2020-7239.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free