A vulnerability described as problematic has been identified in baptisteArno typebot.io up to 3.13.1. The affected element is an unknown function of the file /api/trpc/credentials.getCredentials. Such manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2025-65098. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.