CVE-2025-63639 - Sourcecodester FAQ Bot with AI Assistant XSS Injection

CVE ID : CVE-2025-63639 Published : Nov. 7, 2025, 8:15 p.m. | 1 hour, 10 minutes ago Description : The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing the conversation. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...