Stored Cross-Site Scripting in EmbedAI by EmbedAI Inc.

CVE-2025-0747

What is CVE-2025-0747?

A security vulnerability has been identified in EmbedAI that permits authenticated attackers to inject harmful JavaScript code into messages. When a user accesses the chat feature, this malicious script executes, potentially compromising user data and facilitating further attacks. Mitigating this vulnerability is crucial to ensure the integrity of the application and protect users from an array of potential security threats.

References