CVE-2025-51864

A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...

CVE-2025-51864

A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...

CVE-2025-51864

A reflected cross-site scripting (XSS) vulnerability exists in the AIBOX LLM chat component (chat.aibox365.cn) for versions through 2025-05-27 . The flaw allows attackers to bypass fragile backend filters—potentially by using specific malicious prompts or inserting characters before and after pay...