CVE-2026-24399:詳細資料

CVE-2026-24399

9.3
/
嚴重
0.02%V4
2026-01-24
00h05 +00:00
Cross-site Scripting
A03-Injection
Network
2026-01-26
16h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

ChatterMate has Stored Cross-Site Scripting (XSS) via Chatbot Input Execution

ChatterMate is a no-code AI chatbot agent framework. In versions 1.0.8 and below, the chatbot accepts and executes malicious HTML/JavaScript payloads when supplied as chat input. Specifically, an