Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: 1millionbot Clear all filters
TI-2026-62057 CVE-2026-91921 · GHSA-rf8x-cp2v-q2fg

Cross-Site Scripting (XSS) in 1millionbot’s AI chatbot platform

Priority LOW 24

Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side rendering engine of the 1millionbot AI Chat Platform.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00596 Published 2026-09-21 No fix listed CWE-79
TI-2026-03827 CVE-2026-4400 · GHSA-7h53-73g8-fjvr

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority LOW 30

Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00212 Published 2026-03-31 No fix listed CWE-639
TI-2026-03826 CVE-2026-4399 · GHSA-7649-76jc-fc5r

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority MEDIUM 43

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00269 Published 2026-03-31 No fix listed CWE-1427