1 Posts
Finding a stored HTML injection in an AI chatbot that rendered unsanitized messages server-side, opening the door to defacement and phishing.