Security Advisory

CVE-2024-5933

5.4
MEDIUM

Vulnerability Description

A Cross-site Scripting (XSS) vulnerability exists in the chat functionality of parisneo/lollms-webui in the latest version. This vulnerability allows an attacker to inject malicious scripts via chat messages, which are then executed in the context of the user's browser.
Published Date June 27, 2024
Official Source NIST NVD Advisory