Skip to content
OpenAdvisories

Vendor

NextChat

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.1

    CVE-2026-118132

    NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, the returned content i…