CVE-2024-8400
Stored XSS in gaizhenbiao/chuanhuchatgpt
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
20 mar 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A stored cross-site scripting (XSS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability allows an attacker to upload a malicious HTML file containing JavaScript code, which is then executed when the file is accessed. This can lead to the execution of arbitrary JavaScript in the context of the user's browser.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Productos afectados
gaizhenbiao · gaizhenbiao/chuanhuchatgpt¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →