VYPR
Medium severity6.5NVD Advisory· Published Jul 22, 2025· Updated Jun 17, 2026

CVE-2025-51864

CVE-2025-51864

Description

A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.