ChatGPT SVG Document Rendering Leads to HTML Injection Vulnerability
Vulnerability
A vulnerability exists in the ChatGPT system, through March 30, 2025, due to its handling of SVG documents. The system renders SVGs inline rather than as text within a code block. This behavior allows for HTML injection, which could be exploited in most modern graphical web browsers.
Impact
Exploitation of this vulnerability could lead to HTML injection, potentially allowing for phishing attacks or other malicious activities, according to a referenced source.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
7.7remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.