Advisories · Technology
wupsales AI Chatbot & Workflow Automation by AIWU.
Every CVE that names wupsales AI Chatbot & Workflow Automation by AIWU among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header
- wupsales AI Chatbot & Workflow Automation by AIWU
- Cross-site scripting (XSS)
- CVSS 7.5 High
AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl()
- wupsales AI Chatbot & Workflow Automation by AIWU
- SQL injection