2 matches found
CVE-2024-5125
parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...
7.3CVSS5.6AI score0.00315EPSS
SaveExploits1References1
CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...
7.3CVSS0.00315EPSS
SaveExploits1References2
20