NextChat cross-site scripting vulnerability

Version 2.16.1 of NextChat contains a cross-site scripting vulnerability. This arises because the Plugin Editor fails to properly sanitize HTML or JavaScript tags within externally supplied OpenAPI plugin schemas. As a result, attackers can trick users into loading malicious schemas and executing...