| Package | Affected versions | Patched versions |
|---|---|---|
| fastgpt | < 4.9.12 | 4.9.12 |
FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicious JavaScript or redirect them to attacker-controlled sites. This issue has been patched in version 4.9.12.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free