Deep Chat
Monthly
Cross-site scripting in Deep Chat through 2.5.1 enables remote attackers to inject javascript: links into AI responses, addMessage content, or loaded history because the embedded Remarkable markdown renderer disables link scheme validation; victims must click the crafted link for script execution in the embedding page. The flaw requires the attacker to first place malicious Markdown into the chat stream-typically via control over the AI backend, supplied history, or a reflection path-and no authentication is needed, though user interaction is decisive. This is a genuinely low-priority issue despite being a real XSS flaw, and no public exploit code was identified at time of analysis.
Cross-site scripting in Deep Chat through 2.5.1 enables remote attackers to inject javascript: links into AI responses, addMessage content, or loaded history because the embedded Remarkable markdown renderer disables link scheme validation; victims must click the crafted link for script execution in the embedding page. The flaw requires the attacker to first place malicious Markdown into the chat stream-typically via control over the AI backend, supplied history, or a reflection path-and no authentication is needed, though user interaction is decisive. This is a genuinely low-priority issue despite being a real XSS flaw, and no public exploit code was identified at time of analysis.