CVE-2025-66469 - NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Inje...

CVE ID : CVE-2025-66469 Published : Dec. 8, 2025, 11:54 p.m. | 16 minutes ago Description : NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to Reflected XSS through its ui.add_css, ui.add_scss, and ui.add_sass functions. The functions lack proper sanitization or encoding for the JavaScript context they generate. An attacker can break out of the intended or ), allowing for the execution of arbitrary JavaScript. This issue is fixed in version 3.4.0. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor