CVE-2025-43714: Openai Chatgpt

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which enables HTML injection within most modern graphical web browsers.

Affected products

• Openai Chatgpt: up to and including 2025-03-30

Published 2025-05-19. Last modified 2026-06-17.