| Package | Affected versions | Patched versions |
|---|---|---|
| faq bot with ai assistant | = 1.0 |
The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing the conversation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free