What’s Vulnerable › Vulnerabilities

CVE-2024-48396

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-25 · updated 2026-06-17
• Weakness: CWE-79

Description

AIML Chatbot 1.0 (fixed in 2.0) is vulnerable to Cross Site Scripting (XSS). The vulnerability is exploited through the message input field, where attackers can inject malicious HTML or JavaScript code. The chatbot fails to sanitize these inputs, leading to the execution of malicious scripts.

Affected products

• Sohelamin Chatbot: 1.0

References

• https://github.com/sohelamin/chatbot
• https://jacobmasse.medium.com/reflected-xss-in-popular-ai-chatbot-application-79de74ea0cc8

Get alerted when CVE-2024-48396 or the next vulnerability affects your stack