CVE-2024-5933

MEDIUM

Cross-site Scripting (XSS) in parisneo/lollms-webui

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-5933 has a selected CVSS score of 5.4 (medium).

Description

A Cross-site Scripting (XSS) vulnerability exists in the chat functionality of parisneo/lollms-webui in the latest version. This vulnerability allows an attacker to inject malicious scripts via chat messages, which are then executed in the context of the user's browser.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 28, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

lollms-webui

Browse parisneo / lollms-webui

Default status: unknown

CVE ListBefore *affected

parisneo/lollms-webui

Browse parisneo / parisneo/lollms-webui
CVE ListThrough latestaffected

References

2