xss

Records75

1. closed6.8
   LiteLLM LiteLLM reflected XSS vulnerability in /sso/debug/callback

   Patch now · Disclosed · since 27 Oct 2026

   AI
2. closed7.2
   Open WebUI CVE-2026-109288: Open WebUI stored XSS vulnerability allows JWT theft

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109288

   AI
3. closed8.5
   Open WebUI CVE-2026-109291: Open WebUI Cross-Site Scripting via Citation URLs

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109291

   AI
4. closed8.4
   Open WebUI CVE-2026-109290: Open WebUI Stored XSS Vulnerability in DocxPreview

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109290

   AI
5. closed5.1
   Open WebUI CVE-2026-109300: Stored XSS in Open WebUI Markdown renderer

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109300

   AI
6. closed5.4
   MCP servers & tools CVE-2026-77272: Cross-site scripting in MCP Atlassian OAuth setup

   Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77272

   AI
7. closed8.7
   Open WebUI CVE-2026-87995: Open WebUI XSS via terminal port-preview iframe sandbox misconfiguration

   Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87995

   AI
8. closed6.1
   Langflow CVE-2026-8447: Stored XSS vulnerability in IBM Langflow OSS playground

   Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-8447

   AI
9. closed4.3
   Dify CVE-2026-85021: Cross-site scripting vulnerability in Langgenius Dify splash layout

   Patch now · Disclosed · since 3 Sep 2026 · CVE-2026-85021

   AI
10. closed3.5
    Dify CVE-2026-85022: Cross-site scripting vulnerability in Langgenius Dify web app sign-in

    Patch now · Disclosed · since 3 Sep 2026 · CVE-2026-85022

    AI
11. closed8.7
    Open WebUI CVE-2026-70492: Open WebUI stored XSS vulnerability in math block rendering

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70492

    AI
12. closed8.2
    Open WebUI CVE-2026-70486: Open WebUI file-preview iframe vulnerability leads to account takeover

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70486

    AI
13. closed8.2
    ComfyUI + custom nodes CVE-2026-56670: Stored XSS via SVG handling in ComfyUI view endpoint

    Patch now · Disclosed · since 31 Jul 2026 · CVE-2026-56670

    AI
14. closed8.2
    ComfyUI + custom nodes CVE-2026-56672: Stored XSS vulnerability in ComfyUI userdata endpoint

    Patch now · Disclosed · since 31 Jul 2026 · CVE-2026-56672

    AI
15. closed8.5
    Open WebUI CVE-2026-56398: Stored XSS vulnerability in Open WebUI OAuth flow

    Patch now · Disclosed · since 15 Jul 2026 · CVE-2026-56398

    AI
16. closed7.3
    Open WebUI CVE-2026-59214: Open WebUI stored web worker XSS via Pyodide

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59214

    AI
17. closed
    Lenovo AI Chatbot Lena Cross-Site Scripting via Prompt Manipulation in Lenovo AI Chatbot

    Research · since 18 Aug 2025

    AI
18. closed6.1
    Flowise CVE-2025-71331: Flowise cross-site scripting flaw in chat messages and agent functions

    Patch now · Disclosed · since 20 Jun 2026 · CVE-2025-71331

    AI
19. closed8.7
    Open WebUI CVE-2026-54011: Open WebUI Stored XSS in Mermaid Markdown Preview

    Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54011

    AI
20. closed7.6
    Open WebUI CVE-2026-54013: Open WebUI Stored XSS via Model Profile Images

    Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54013

    AI
21. closed5.1
    Open WebUI CVE-2026-45346: Cross-Site Scripting in Open WebUI SVG Renderer

    Patch now · Disclosed · since 15 May 2026 · CVE-2026-45346

    AI
22. closed8.1
    Open WebUI CVE-2026-45665: Stored XSS in Open WebUI Banner Component

    Patch now · Disclosed · since 15 May 2026 · CVE-2026-45665

    AI
23. closed5.4
    Open WebUI CVE-2026-45318: Open WebUI Stored XSS via Unsanitized Office Preview Rendering

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45318

    AI
24. closed7.7
    Open WebUI CVE-2026-45303: Open WebUI stored XSS in HTML rendering view

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45303

    AI
25. closed
    Open WebUI Open WebUI vulnerable to stored XSS via OAuth picture claim

    Patch now · Disclosed · since 14 May 2026

    AI
26. closed5.4
    Open WebUI CVE-2026-45299: Open WebUI stored cross-site scripting in profile picture

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45299

    AI
27. closed7.4
    Open WebUI CVE-2026-45314: Open WebUI stored XSS via SVG webhook profile image

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45314

    AI
28. closed8.7
    Open WebUI CVE-2026-45315: Open WebUI stored XSS via audio transcription uploads

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45315

    AI
29. closed7.3
    Open WebUI CVE-2026-44721: Open WebUI Vulnerable to Stored XSS via Model Description

    Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44721

    AI
30. closed7.3
    Open WebUI CVE-2026-44549: Open WebUI stored XSS in Excel file preview

    Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44549

    AI
31. closed4.8
    Open WebUI CVE-2026-44568: Open WebUI Stored XSS in Pending User Overlay

    Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44568

    AI
32. closed6.9
    Dify CVE-2026-42138: Unauthenticated XSS vulnerability in Dify

    Patch now · Disclosed · since 4 May 2026 · CVE-2026-42138

    AI
33. closed6.4
    Langflow CVE-2026-3346: IBM Langflow Desktop stored cross-site scripting

    Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-3346

    AI
34. closed3.5
    ComfyUI + custom nodes CVE-2026-6593: Cross-site scripting vulnerability in ComfyUI view endpoint

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6593

    AI
35. closed3.5
    ComfyUI + custom nodes CVE-2026-6592: Cross-site scripting vulnerability in ComfyUI userdata endpoint

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6592

    AI
36. closed3.5
    Dify CVE-2026-6619: Cross-site scripting vulnerability in Langgenius Dify

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6619

    AI
37. closed3.5
    Langflow CVE-2026-6600: Cross-site scripting vulnerability in langflow-ai langflow frontend

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6600

    AI
38. closed9.6
    LoLLMs CVE-2026-1115: parisneo/lollms vulnerable to stored XSS in social feature

    Patch now · Disclosed · since 10 Apr 2026 · CVE-2026-1115

    AI
39. closed9.6
    AnythingLLM CVE-2026-32626: XSS to RCE vulnerability in AnythingLLM desktop chat

    Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32626

    AI
40. closed5.4
    Dify CVE-2026-21866: Stored XSS vulnerability in Dify chat rendering of Mermaid diagrams

    Patch now · Disclosed · since 3 Mar 2026 · CVE-2026-21866

    AI
41. closed7.3
    Open WebUI CVE-2026-26192: Open WebUI stored XSS via citation document metadata

    Patch now · Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2026-26192

    AI
42. closed7.3
    Open WebUI CVE-2026-26193: Open WebUI stored XSS via iFrame embed properties

    Patch now · Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2026-26193

    AI
43. closed6.1
    Dify CVE-2026-26023: Cross-site scripting vulnerability in Dify LLM platform

    Patch now · Disclosed · since 11 Feb 2026 · CVE-2026-26023

    AI
44. closed9.6
    Lobe Chat CVE-2026-23733: Lobe Chat Cross-Site Scripting via Mermaid Artifact Renderer

    Patch now · Disclosed · since 20 Jan 2026 · CVE-2026-23733

    AI
45. closed9.6
    MCP servers & tools CVE-2025-66580: Dive MCP Host Application RCE Vulnerability

    Patch now · Disclosed · since 19 Dec 2025 · CVE-2025-66580

    AI
46. closed8.7
    Open WebUI Open WebUI Stored XSS Vulnerability CVE-2025-65959

    Patch now · Disclosed · since 4 Dec 2025 · CVE-2025-65959

    AI
47. closed8.7
    Open WebUI CVE-2025-64495: Open WebUI vulnerable to Stored DOM XSS via prompts

    Patch now · Disclosed · since 7 Nov 2025 · updated 8 Nov 2025 · CVE-2025-64495

    AI
48. closed5.3
    FastMCP CVE-2025-62800: FastMCP reflected XSS in oauth callback page

    Patch now · Disclosed · since 29 Oct 2025 · CVE-2025-62800

    AI
49. closed6.1
    Dify CVE-2025-58747: Cross-site scripting vulnerability in Dify MCP OAuth component

    Patch now · Disclosed · since 17 Oct 2025 · CVE-2025-58747

    AI
50. closed
    Flowise Flowise vulnerable to XSS

    Patch now · Disclosed · since 3 Oct 2025

    AI
51. closed9.3
    Flowise CVE-2025-50538: Flowise iframe cross-site scripting vulnerability

    Patch now · Disclosed · since 6 Oct 2025 · updated 6 Oct 2025 · CVE-2025-50538

    AI
52. closed5.3
    Flowise CVE-2025-29192: Flowise chat log cross-site scripting vulnerability

    Patch now · Disclosed · since 6 Oct 2025 · updated 6 Oct 2025 · CVE-2025-29192

    AI
53. closed6.8
    Lobe Chat CVE-2025-59417: Lobe Chat Desktop RCE via XSS in Chat Messages

    Patch now · Disclosed · since 18 Sep 2025 · CVE-2025-59417

    AI
54. closed8.6
    MCP SDKs CVE-2025-58444: MCP Inspector Vulnerable to Command Execution via XSS

    Patch now · Disclosed · since 8 Sep 2025 · CVE-2025-58444

    AI
55. closed8.8
    Visionatrix CVE-2025-49126: Visionatrix XSS Vulnerability

    Patch now · Disclosed · since 23 Jun 2025 · CVE-2025-49126

    AI
56. closed6.1
    Dify CVE-2025-49149: Cross-site scripting vulnerability in Dify

    Patch now · Disclosed · since 17 Jun 2025 · CVE-2025-49149

    AI
57. closed4.3
    ComfyUI + custom nodes CVE-2025-6092: Cross-site scripting vulnerability in ComfyUI

    Patch now · Disclosed · since 15 Jun 2025 · CVE-2025-6092

    AI
58. closed9.6
    5ire CVE-2025-47777: Stored XSS and RCE Vulnerability in 5ire AI Assistant

    Patch now · Disclosed · since 14 May 2025 · CVE-2025-47777

    AI
59. closed6.4
    Open WebUI CVE-2025-46571: Open WebUI stored XSS via uploaded HTML file

    Patch now · Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2025-46571

    AI
60. closed7.4
    Open WebUI CVE-2025-46719: Open WebUI vulnerable to stored XSS in chat transcripts

    Patch now · Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2025-46719

    AI
61. closed6.8
    Open WebUI CVE-2024-7044: Open WebUI stored cross-site scripting via file upload

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7044

    AI
62. closed8.4
    Open WebUI CVE-2024-7990: Open WebUI stored cross-site scripting vulnerability

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7990

    AI
63. closed9.3
    Copilot Studio CVE-2024-49038: XSS vulnerability in Microsoft Copilot Studio

    Patch now · Disclosed · since 26 Nov 2024 · CVE-2024-49038

    AI
64. closed6.1
    LocalAI CVE-2024-48057: LocalAI vulnerable to Cross-Site Scripting via delete model API

    Patch now · Disclosed · since 4 Nov 2024 · CVE-2024-48057

    AI
65. closed6.5
    LoLLMs CVE-2024-6581: LoLLMs cross-site scripting vulnerability via SVG upload

    Patch now · Disclosed · since 29 Oct 2024 · CVE-2024-6581

    AI
66. closed5.4
    Gradio CVE-2024-47872: Gradio cross-site scripting via file uploads

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47872

    AI
67. closed9.6
    Flowise CVE-2024-9148: Flowise and Flowise Chat Embed stored XSS vulnerability

    Patch now · Disclosed · since 25 Sep 2024 · CVE-2024-9148

    AI
68. closed6.1
    Open WebUI CVE-2024-6706: Open WebUI Stored Cross-Site Scripting

    Patch now · Disclosed · since 8 Aug 2024 · CVE-2024-6706

    AI
69. closed6.1
    Flowise CVE-2024-36422: Flowise Cross-site Scripting Vulnerability

    Patch now · Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-36422

    AI
70. closed6.1
    Flowise CVE-2024-37146: Flowise Cross-site Scripting Vulnerability

    Patch now · Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-37146

    AI
71. closed6.1
    Flowise CVE-2024-37145: Flowise Cross-site Scripting Vulnerability

    Patch now · Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-37145

    AI
72. closed6.1
    Flowise CVE-2024-36423: Flowise reflected cross-site scripting

    Patch now · Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-36423

    AI
73. closed8.3
    LoLLMs CVE-2024-2288: CSRF and XSS Vulnerability in Lollms Web UI

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-2288

    AI
74. closed7.4
    LoLLMs CVE-2024-2299: Lollms-webui stored Cross-Site Scripting vulnerability

    Patch now · Disclosed · since 14 May 2024 · CVE-2024-2299

    AI
75. closed0.0
    AnythingLLM CVE-2024-3570: Stored Cross-Site Scripting in AnythingLLM

    Patch now · Disclosed · since 10 Apr 2024 · CVE-2024-3570

    AI