AnythingLLM versions 1.16.1 and earlier contain an XSS vulnerability due to improper neutralization of input during web page generation. The manager role can store values for meta_page_title or meta_page_favicon without escaping, which are then inserted directly into the homepage HTML by MetaGenerator.generate(). This allows injected JavaScript to execute in the context of an administrator's browser, potentially stealing JWT tokens and enabling unauthorized API access and administrative actions. The vulnerability arises because server/models/systemSettings.js returns these values unchanged, and the concatenation in server/utils/boot/MetaGenerator.js does not sanitize them. No patch or fixed version is available as of the latest review.

An attacker with manager role privileges can inject JavaScript that executes in an administrator's browser when visiting the homepage. This can lead to theft of the administrator's JWT token, enabling the attacker to create API keys, access or modify workspace and chat data, delete users, and perform other administrative actions. The vulnerability impacts confidentiality and integrity but does not affect availability. The CVSS score is 5.5 (medium severity).

No fixed version or patch is currently available. Administrators should restrict manager role privileges to trusted users only and avoid visiting the homepage while untrusted managers have set meta_page_title or meta_page_favicon values. Monitor vendor advisories for updates and patches addressing this vulnerability.