-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| open-webui | pip |
Miggo AIRoot Cause AnalysisThe vulnerability stems from two critical points: 1) Inadequate input sanitization during file upload processing (backend), and 2) Unsafe rendering of stored content (frontend). The backend function fails to strip/escape malicious scripts from uploaded files, while the frontend function directly injects untrusted content into the DOM. This matches the described stored XSS pattern where payloads persist through storage and execute on rendering. Confidence is high because these components are fundamental to the described attack flow, even without explicit code examples.
Ongoing coverage of React2Shell