CVE-2024-2299 — A stored Cross-Site Scripting (XSS) vulnerability exists in the parisneo/lollms-webui application due to improper validation of uploaded files in the profile picture upload functionality. Attackers ca — CVE Database · The Intelligence Room