Vendor
NextChat
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.1
CVE-2026-118132
NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, the returned content i…