Stored Cross-Site Scripting Vulnerability in Gaizhenbiao ChatGPT Repository

CVE-2024-9107

What is CVE-2024-9107?

A stored cross-site scripting vulnerability exists in the Gaizhenbiao ChatGPT repository due to improper sanitization of HTML tags during chat history uploads. This flaw results from the sanitization mechanism's failure to correctly handle HTML tags within code blocks, allowing an attacker to inject malicious scripts. Exploitation of this vulnerability would enable the execution of arbitrary JavaScript code in the user's browser, posing significant risks such as identity theft and other malicious activities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References