VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026

CVE-2025-0183

CVE-2025-0183

Description

A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the debug_log.html file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Binary Husky/Gpt Academic2 versions
    cpe:2.3:a:binary-husky:gpt_academic:3.90:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:binary-husky:gpt_academic:3.90:*:*:*:*:*:*:*
    • (no CPE)range: =3.9.0
  • binary-husky/binary-husky/gpt_academicv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.