CVE-2025-51858

Self Cross-Site Scripting XSS vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain sensitive information via a crafted SVG file contents sent through the chat component...

CVE-2025-51858

A Self Cross-Site Scripting (XSS) vulnerability exists in ChatPlayground.ai versions through 2025-05-24 . Attackers can execute arbitrary JavaScript by pasting malicious text containing an SVG XSS payload into the chat component (https://www.chatplayground.ai/chat/). This allows for the theft of ...