CVE-2025-0746

A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to craft a malicious URL leveraging the"/embedai/users/show/<SCRIPT>" endpoint to inject the malicious JavaScript code. This JavaScript code will be executed when a user opens the malicious URL.
Configurations

No configuration.

History

30 Jan 2025, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-30 12:15

Updated : 2025-01-30 12:15


NVD link : CVE-2025-0746

Mitre link : CVE-2025-0746

CVE.ORG link : CVE-2025-0746


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')