← Database

CVE-2025-43714

MEDIUM CVSS: 6.5 Published: 2025-05-19 Modified: 2026-06-17

Description

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which enables HTML injection within most modern graphical web browsers.

Affected Platforms

Openai Chatgpt

Weakness Type

CWE-77

References