Medium severity6.5NVD Advisory· Published Jul 22, 2025· Updated Jun 17, 2026
CVE-2025-51864
CVE-2025-51864
Description
A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2025-05-27
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.