1. Home
  2. CVE Database
  3. CVE-2024-7204
MEDIUM · 6.1

CVE-2024-7204

Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a S...

Vulnerability Description

Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a Stored XSS attack.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Ai3Qbibot< 8.0.9.02

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2024-7204?

CVE-2024-7204 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a S...

How severe is CVE-2024-7204?

CVE-2024-7204 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-7204?

Check the references section above for vendor advisories and patch information. Affected products include: Ai3 Qbibot.