CVE Database /
CVE-2024-0378
CVE · Medium
CVE-2024-0378 — AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.2.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-0378
|
AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.2.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 2.2.1
|
2.2.1 |
2024-03-01 |
—
|
CVE-2024-0378
The AI Engine plugin for WordPress contains a cross-site scripting vulnerability that could permit an attacker to inject harmful scripts into a website, potentially leading to execution of malicious code when users visit the affected site. The flaw was discovered by rootxsudip and affects versions prior to 2.2.1. Upgrading to version 2.2.1 or later resolves this security issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings