EUVD-2026-77131
GHSA-4983-r678-hfh4
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stored XSS requires authenticated attacker (PR:L) and victim viewing history (UI:R); scope changes to victim browser (S:C) with low confidentiality and integrity impact.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.
AnalysisAI
Stored cross-site scripting in Open-Generative-AI's studio history components (ImageStudio.js, CinemaStudio.js, LipSyncStudio.js, VideoStudio.js) allows an authenticated low-privileged user to inject arbitrary HTML and JavaScript into the history panel by crafting a malicious generation prompt or URL, which then executes in any victim's browser session when the history panel is viewed. Versions up to 1.0.11 and 2.0.0 are affected per CPE and VulDB reporting. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) a valid authenticated account on the target Open-Generative-AI instance with at least low-privilege access to the image or media generation features, so that a malicious entry can be written to the generation history (CVSS PR:L); (2) a victim user who subsequently navigates to the history panel where the malicious entry is rendered via innerHTML (CVSS UI:P - passive user interaction). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 5.1 (Medium) with vector AV:N/AC:L/AT:N/PR:L/UI:P is a reasonable representation of realistic risk: exploitation requires a valid authenticated account and a victim who passively views the history panel, meaningfully constraining the attacker pool. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The upstream fix is proposed in GitHub PR #344 (https://github.com/Anil-matcha/Open-Generative-AI/pull/344), which replaces innerHTML template-literal rendering across all four affected studio components with a safe historyDom.mjs DOM-construction helper; however, this PR had not been merged at the time of CVE disclosure, so an officially released patched version is not independently confirmed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today