Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing the conversation.

Published

2025-11-07T20:15:38.113

Last Modified

2025-11-17T18:55:26.417

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses

Type: Secondary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	remyandrade	faq_bot_with_ai_assistant	1.0	Yes

References

https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-63639/README.md Exploit, Mitigation, Third Party Advisory ([email protected])
https://www.sourcecodester.com/javascript/18413/faq-bot-ai-assistant-using-html-css-and-javascript-source-code.html Product ([email protected])