Medium severity6.5NVD Advisory· Published May 19, 2025· Updated Jun 17, 2026

CVE-2025-43714

Description

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which enables HTML injection within most modern graphical web browsers.

Affected products

OpenAI/Chatgpt2 versions
cpe:2.3:a:openai:chatgpt:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openai:chatgpt:*:*:*:*:*:*:*:*range: <=2025-03-30
- (no CPE)range: <=2025-03-30
ChatGPT/ChatGPTdescription

Patches

Vulnerability mechanics

References

medium.com/@zer0dac/chatgpt-a-potential-phishing-vector-via-html-injection-bf703c79590anvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000