CVE-2025-0183
A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the `debug_log.html` file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access.
Vendor
Product
CWE
Yayın Tarihi
2025-03-20 10:15:51
Güncelleme
2025-08-01 01:53:16
Source Identifier
security@huntr.dev
KEV Date Added
-