| Package | Affected versions | Patched versions |
|---|---|---|
| gpt academic | = 3.90 |
A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the `debug_log.html` file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free