CVE-2026-57362

9th percentile — higher than 9% of all known CVEs

The ChatBot plugin version 8.3.2 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

The risk involves the execution of arbitrary JavaScript code in the victim's browser, potentially leading to session theft, redirects to malicious sites, or theft of sensitive data.

It is recommended to immediately update the ChatBot plugin to the latest available version that fixes this vulnerability. Consider also deploying a Web Application Firewall (WAF) to block XSS attacks.