Vulnerabilities (CVE)

Filtered by vendor Remyandrade Subscribe
Filtered by product Faq Bot With Ai Assistant
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-63639 1 Remyandrade 1 Faq Bot With Ai Assistant 2025-11-17 N/A 6.1 MEDIUM
The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing the conversation.