CNNVD-202511-774 Information

CNNVD ID

CNNVD-202511-774

CVE-2025-63639

  • CNNVD Published: 2025-11-07

Description (Chinese)

SourceCodester FAQ Bot with AI Assistant是SourceCodester开源的一个带有人工智能助手的问答机器人。 SourceCodester FAQ Bot with AI Assistant v1.0版本存在安全漏洞,该漏洞源于对用户提供输入的处理不当,可能导致跨站脚本攻击。

Description (English)

SourceCodester FAQ Bot with AI Assistant is a question-and-answer robot with an artificial intelligence assistant. The security gap in version FAQ Bot with AI Asistant v1.0 arises from the inappropriate handling of input from users, which may result in a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

SourceCodester

Published

2025-11-07

Last Modified

2026-02-24

References

https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-63639/README.md https://www.sourcecodester.com/javascript/18413/faq-bot-ai-assistant-using-html-css-and-javascript-source-code.html

Share on: