CVE-2025-0183: A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability…

PriorityP425medium5.4CVSS 3.0

AVNACLPRLUIRSCCLILAN

EPSS

0.36%

28.2th percentile

A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the `debug_log.html` file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
binary-husky	binary-husky_gpt_academic	unspecified – latest	—
binary-husky	gpt_academic	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.