CVE-2025-0747 — Stored Cross-Site vulnerability in EmbedAI
A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message t…
Published: 2025-01-30 · CVSS: 8.6 · CVSS 3.1
A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the chat.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7