WPBot – AI ChatBot for Live Support, Lead Generation, AI Services contains a stored cross‑site scripting flaw in the 'conversation' parameter. Due to insufficient sanitization and output escaping, attackers can submit arbitrary JavaScript that is persisted and served to any user who views the affected page. Once executed in a victim’s browser, the injected script runs with the privileges of the user, potentially allowing data exfiltration, session hijacking, or malware delivery. The flaw is categorized as CWE‑79 – Improper Neutralization of Input During Web Page Generation.

All instances of WPBot plugin version 8.4.9 or earlier installed on WordPress sites are vulnerable. The plugin, distributed by quantumcloud under the name WPBot – AI ChatBot for Live Support, Lead Generation, AI Services, is widely used for chat‑based customer support and lead‑generation. Any WordPress site that has the affected version active on the frontend exposes users to the stored XSS risk.

The reported CVSS score of 7.2 indicates high severity, reflecting that the flaw can impact confidentiality, integrity, and availability of end‑user browsers. The exploitability is straightforward: the AJAX nonce required for the save request is publicly emitted on every frontend page through wp_localize_script, providing a practical authentication bypass that allows unauthenticated users to craft and store malicious conversation entries. Based on the description, it is inferred that this lack of protection enables any anonymous visitor to trigger the stored XSS, given that the plugin accepts input without restrictions. As the vulnerability is not listed in the CISA KEV catalog and an EPSS score is unavailable, the precise likelihood of exploitation remains uncertain, but the public nature of the nonce and the widespread deployment of the plugin suggest a reasonable risk of real‑world attacks.