The vulnerability resides in the read_metadata_from_safetensors function of the Extra‑Networks Card Builder in stable‑diffusion‑webui. By altering the __metadata__.sshs_model_hash argument an attacker can inject malicious JavaScript that will run in the browser context of any user who views the affected content, leading to typical XSS consequences such as credential theft or session hijack. The CVSS score of 5.3 indicates a moderate severity and the attack can be carried out remotely without authentication.

Automatic1111 stable‑diffusion‑webui up to and including version 1.10.1 are affected. The impact is limited to environments where the Extra‑Networks Card Builder module is enabled.

The CVSS score reflects a moderate risk. No EPSS data is available and the vulnerability is not listed in CISA KEV, suggesting it is not currently observed as a widespread exploit. Nevertheless the publicly disclosed proof of concept demonstrates that the flaw can be exploited from a remote vector, and XSS remains a high‑impact attack surface for web interfaces.