Threats tagged 'ghsa-v698-c6j4-6m42'

A Stored Cross-Site Scripting (XSS) vulnerability exists in the chat functionality of the SelfBest platform version 2023.3. Authenticated attackers can inject malicious scripts via the chat message input, which are then stored and executed in other users' browsers when viewing the message. This can lead to session hijacking, account takeover, or other client-side attacks.