CVE-2025-51860: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in TelegAI telegai.com 2025-05-26 in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by crafting an AI Character with SVG XSS payloads in either description, greeting, example dialog, or system...

PT-2025-30419 · Telegai · Telegai

Name of the Vulnerable Software and Affected Versions: TelegAI affected versions not specified Description: The application contains a stored cross-site scripting XSS issue in its chat component and character container component. An attacker can execute arbitrary client-side scripts by creating a...

CVE-2025-51860

TelegAI (telegai.com) is vulnerable to Stored Cross-Site Scripting (XSS) in its chat component and character container component . An attacker can achieve arbitrary client-side script execution by crafting an AI Character containing SVG XSS payloads within the description, greeting, example dialo...