CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.
CVE
CVE-2024-5933
Severity
MEDIUM
CVSS
5.4
EPSS
0.35%
Original NVD Description
A Cross-site Scripting (XSS) vulnerability exists in the chat functionality of parisneo/lollms-webui in the latest version. This vulnerability allows an attacker to inject malicious scripts via chat messages, which are then executed in the context of the user's browser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)