Sean Segreti

The issue allows attackers to craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page. This enables attackers to inject malicious scripts.

The issue allows attacker-controlled files to be uploaded to arbitrary locations on the web server's filesystem by exploiting a path traversal vulnerability. This enables potential unauthorized access and modification of sensitive data.