CyberChef versions prior to 11.0.0 contain a cross-site scripting (XSS) vulnerability in the Show Base64 offsets feature. This flaw allows an attacker to inject malicious scripts, potentially leading to information disclosure or manipulation of the application. The vulnerability is fixed in version 11.0.0.