What’s Vulnerable › Vulnerabilities

CVE-2024-6035: Stored XSS in gaizhenbiao/chuanhuchatgpt

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-11 · updated 2026-06-17
• Weakness: CWE-79

Description

A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410. This vulnerability allows an attacker to inject malicious JavaScript code into the chat history file. When a victim uploads this file, the malicious script is executed in the victim's browser. This can lead to user data theft, session hijacking, malware distribution, and phishing attacks.

Affected products

• gaizhenbiao/chuanhuchatgpt: 20240410

References

• https://huntr.com/bounties/e4e8da71-53a9-4540-8d70-6b670b076987
• https://huntr.com/bounties/e4e8da71-53a9-4540-8d70-6b670b076987

Get alerted when CVE-2024-6035 or the next vulnerability affects your stack