Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-0747

Stored Cross-Site vulnerability in EmbedAI

Description

A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the chat.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EmbedAI EmbedAI

Default version status: unaffected

  • 0 to < 2.1affected

References