CVE-2024-7790

Name of the Vulnerable Software and Affected Versions DevikaAI versions from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards

Description A stored cross site scripting issue exists due to improperly decoded user input. This allows for the storage and subsequent execution of malicious scripts, potentially leading to unauthorized actions on behalf of the user.

Recommendations For versions from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards, consider implementing proper input decoding and validation to prevent the storage of malicious scripts. As a temporary workaround, restrict user input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.