CPE
Open-WebUI is vulnerable to stored cross-site scripting (XSS) where an authenticated user with model creation permissions can inject a malicious model description containing a javascript: URI within a markdown link that, when clicked, executes arbitrary JavaScript in another user's browser, potentially leading to session hijacking; this affects versions v0.3.5 through v0.8.12.