Lollms Lord Of Large Language Models vulnerabilities

1 known vulnerability affecting lollms/lord_of_large_language_models.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2024-6581CRITICALCVSS 9.0v9.92024-10-29

CVE-2024-6581 [CRITICAL] CWE-79 CVE-2024-6581: A vulnerability in the discussion image upload function of the Lollms application, version v9.9, all A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script