{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/ai-marketing-expert/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ai_marketing_expert:ai_marketing_expert:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-109999"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media \u0026"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["AI Marketing Expert"],"content_html":"\u003cp\u003eThe AI Marketing Expert plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) via the 'name' parameter. The flaw stems from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts. The payload is stored via three unauthenticated REST calls and executes within the context of an administrator session when viewing the wp-admin/index.php dashboard.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker identifies an installation of the AI Marketing Expert plugin with the chatbot module active.\u003c/li\u003e\n\u003cli\u003eAttacker executes three unauthenticated REST API calls to the target WordPress site.\u003c/li\u003e\n\u003cli\u003eThe 'name' parameter is injected with an XSS payload, which is improperly sanitized by the plugin.\u003c/li\u003e\n\u003cli\u003eThe malicious payload is persisted in the plugin's chatbot configuration data.\u003c/li\u003e\n\u003cli\u003eAn administrator logs into the WordPress dashboard and accesses wp-admin/index.php.\u003c/li\u003e\n\u003cli\u003eThe plugin's JavaScript widget auto-poll mechanism retrieves the stored payload.\u003c/li\u003e\n\u003cli\u003eThe browser renders the payload, executing the JavaScript in the administrator's security context.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to execute arbitrary JavaScript within the browser session of an authenticated WordPress administrator, potentially resulting in unauthorized administrative actions or data theft.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the AI Marketing Expert plugin to a version beyond 1.2.8 immediately.\u003c/li\u003e\n\u003cli\u003eIf a patch is unavailable, disable the chatbot module within the plugin settings to mitigate the exploitation vector.\u003c/li\u003e\n\u003cli\u003eReview WordPress REST API logs for anomalous unauthenticated POST requests targeting the plugin's configuration endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T06:26:14Z","date_published":"2026-10-28T06:26:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-ai-marketing-expert-xss/","summary":"The AI Marketing Expert plugin for WordPress (\u003c= 1.2.8) contains a stored DOM-based XSS vulnerability allowing unauthenticated attackers to execute arbitrary JavaScript in the administrative dashboard.","title":"AI Marketing Expert: Stored DOM-Based Cross-Site Scripting (CVE-2026-109999)","url":"https://feed.craftedsignal.io/briefs/2026-10-ai-marketing-expert-xss/"}],"language":"en","title":"CraftedSignal Threat Feed - AI Marketing Expert","version":"https://jsonfeed.org/version/1.1"}