{"metadata": {"vulnerability": "cve-2023-4253", "count": 18, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-08-08T19:59:35.881Z", "date_only": false, "value": "2023-08-08T19:59:35.881Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-4253", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-04T11:26:57.652Z", "date_only": false, "value": "2023-09-04T11:26:57.652Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-4253", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-04T12:15:00Z", "date_only": false, "value": "2023-09-04T12:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-4253", "record": "GSD-2023-4253", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-04T12:15:10Z", "date_only": false, "value": "2023-09-04T12:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MF7X-4M4X-G6PW", "record": "GHSA-MF7X-4M4X-G6PW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-04T12:15:10.333Z", "date_only": false, "value": "2023-09-04T12:15:10.333", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4253", "record": "FKIE_CVE-2023-4253", "field": "published"}, {"timestamp": "2023-09-04T12:30:19Z", "date_only": false, "value": "2023-09-04T12:30:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MF7X-4M4X-G6PW", "record": "GHSA-MF7X-4M4X-G6PW", "field": "published"}, {"timestamp": "2023-09-04T16:16:33Z", "date_only": false, "value": "2023-09-04T16:16:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/69789", "record": "CVE-2023-4253", "field": "creation_timestamp", "uuid": "9fb5b9a1-515b-4d75-b943-6cb978f58b08", "content": "\u203c CVE-2023-4253 \u203c\n\nThe AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/69789"}, {"timestamp": "2023-09-04T23:14:22.067Z", "date_only": false, "value": "2023-09-04T23:14:22.067Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2023-4253", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-08T06:51:00Z", "date_only": false, "value": "2023-09-08T06:51Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-4253", "record": "GSD-2023-4253", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-02T11:22:21Z", "date_only": false, "value": "2023-11-02T11:22:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/73414", "record": "CVE-2023-4253", "field": "creation_timestamp", "uuid": "321863ea-2c5a-43ad-95e5-efe1f7055dcf", "content": "\u203c CVE-2023-5606 \u203c\n\nThe ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. NOTE: This vulnerability is a re-introduction of CVE-2023-4253.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/73414"}, {"timestamp": "2023-12-13T01:20:26.795Z", "date_only": false, "value": "2023-12-13T01:20:26.795326Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-4253", "record": "GSD-2023-4253", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T07:26:06Z", "date_only": false, "value": "2024-04-04T07:26:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MF7X-4M4X-G6PW", "record": "GHSA-MF7X-4M4X-G6PW", "field": "modified"}, {"timestamp": "2024-08-02T07:24:03.569Z", "date_only": false, "value": "2024-08-02T07:24:03.569Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-4253", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T16:07:17.647Z", "date_only": false, "value": "2025-04-23T16:07:17.647871Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4253", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-23T16:07:17.647Z", "date_only": false, "value": "2025-04-23T16:07:17.647871Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4253", "record": "FKIE_CVE-2023-4253", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T16:18:10.867Z", "date_only": false, "value": "2025-04-23T16:18:10.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-4253", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T16:18:10.867Z", "date_only": false, "value": "2025-04-23T16:18:10.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4253", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:37:25.030Z", "date_only": false, "value": "2026-06-17T06:37:25.030", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4253", "record": "FKIE_CVE-2023-4253", "field": "lastModified"}]}
