← CVE Intelligence

CVE-2024-5933

Cross-site Scripting (XSS) in parisneo/lollms-webui PUBLISHED

Description (CNA)

A Cross-site Scripting (XSS) vulnerability exists in the chat functionality of parisneo/lollms-webui in the latest version. This vulnerability allows an attacker to inject malicious scripts via chat messages, which are then executed in the context of the user's browser.

Affected (CNA)

Vendor / productVersions
parisneo / parisneo/lollms-webuiaffected unspecified through latest

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.