CVE-2024-8400

MEDIUM

Stored XSS in gaizhenbiao/chuanhuchatgpt

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-8400 has a selected CVSS score of 5.4 (medium).

Description

A stored cross-site scripting (XSS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability allows an attacker to upload a malicious HTML file containing JavaScript code, which is then executed when the file is accessed. This can lead to the execution of arbitrary JavaScript in the context of the user's browser.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 20, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

gaizhenbiao/chuanhuchatgpt

Browse gaizhenbiao / gaizhenbiao/chuanhuchatgpt
CVE ListBefore 20240410affected

References

3