Gaizhenbiao Chuanhuchatgpt Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the gaizhenbiao/chuanhuchatgpt repository, specifically in version git 20b2e02. This vulnerability stems from inadequate sanitization of HTML tags in chat history uploads. The sanitization process fails to properly manage HTML tags within code blocks, enabling attackers to inject malicious scripts. Consequently, this flaw could allow the execution of arbitrary JavaScript in the user's browser, with potential risks including identity theft or other malicious activities.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user's browser.