{"data":{"id":"0759dd62-7555-4962-bf9e-7778d391896a","title":"CVE-2023-7215: A vulnerability, which was classified as problematic, has been found in Chanzhaoyu chatgpt-web 2.11.1. This issue…","summary":"CVE-2023-7215 is a cross-site scripting flaw in Chanzhaoyu chatgpt-web 2.11.1, classified as problematic by VulDB. It is triggered by manipulating the Description argument with input such as an image tag with an onerror handler, and the attack may be initiated remotely. Public exploit disclosure is noted, and the weakness is listed as CWE-79.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-7215","publishedAt":"2024-01-08T07:15:14.027Z","cveId":"CVE-2023-7215","cweIds":["CWE-79"],"cvssScore":"3.5","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["chatgpt-web 2.11.1"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Chanzhaoyu chatgpt-web cross site scripting through the Description argument","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00519,"epssCheckedAt":"2026-11-04T18:09:13.386Z","kevDateAdded":null,"advisoryAliases":["GHSA-jw72-xfhc-2vr4"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T06:09:54.168Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-198","CAPEC-86"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}