CVE-2020-7239: IBM Chatbot With IBM Watson

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.

Affected products

• IBM Chatbot With IBM Watson: before 0.8.21 (fixed in 0.8.21)

Published 2020-01-21. Last modified 2026-06-17.