Lucene search
+L

8 matches found

EUVD
EUVD
•added 2026/09/14 12:31 a.m.•21 views

EUVD-2026-77131

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.7AI score0.00356EPSS
SaveExploits0References8
NVD
NVD
•added 2026/09/13 11:16 p.m.•14 views

CVE-2026-90602

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

5.1CVSS0.00356EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/09/13 10:45 p.m.•9 views

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.8AI score0.00356EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/13 10:45 p.m.•38 views

CVE-2026-90602

A cross-site scripting (XSS) vulnerability affects the renderHistory function in ImageStudio.js within the Studio Components component of Anil-matcha Open-Generative-AI (versions up to 1.0.11/2.0.0). The attack can be initiated remotely and requires low privileges and user interaction , resulting...

5.1CVSS3.8AI score0.00356EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/13 10:45 p.m.•37 views

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

5.1CVSS0.00356EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/13 10:45 p.m.•13 views

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.9AI score
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•4 views

CVE-2026-90602: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.7AI score0.00356EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/13 12:00 a.m.•19 views

PT-2026-90986

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.7AI score0.00356EPSS
SaveExploits0References8
Rows per page
Query Builder