CVE-2025-2219

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

PT-2025-10984

Name of the Vulnerable Software and Affected Versions: LoveCards LoveCardsV2 versions 2.3.0 through 2.3.2 Description: A critical issue affects the processing of the file /api/upload/image. The manipulation of the file argument leads to unrestricted upload. The attack may be initiated remotely. T...

CVE-2025-2219: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

CVE-2024-10099

CVE-2024-10099 is a stored XSS in comfyanonymous/comfyui triggered by uploading an HTML image via /api/upload/image and executing when viewed through /view. Affected versions cited include 0.2.2 and possibly earlier; some sources also reference up to 0.3.39, indicating broader impact across multi...

CVE-2024-10099

A stored cross-site scripting XSS vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier. The vulnerability occurs when an attacker uploads an HTML file containing a malicious XSS payload via the /api/upload/image endpoint. The payload is executed when the file is viewe...

CVE-2024-10099: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier. The vulnerability occurs when an attacker uploads an HTML file containing a malicious XSS payload via the /api/upload/image endpoint. The payload is executed when the file is viewe...

PT-2024-27701

Name of the Vulnerable Software and Affected Versions slowlyo OwlAdmin versions up to 3.5.7 Description A problematic issue has been found in slowlyo OwlAdmin, affecting some unknown functionality of the file "/admin-api/upload image" of the component Image File Upload. The manipulation of the...