CVE-2024-48059

Name of the Vulnerable Software and Affected Versions gaizhenbiao/chuanhuchatgpt project, version <=20240802

Description The issue is related to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim accesses this session, the malicious JavaScript is executed in the victim's browser.

Recommendations For version <=20240802, update to a version later than 20240802 to resolve the stored Cross-Site Scripting (XSS) issue in WebSocket session transmission. As a temporary workaround, consider restricting access to WebSocket sessions to minimize the risk of exploitation.