CVE-2024-55451

creationtimestamp| type| source ---|---|--- 2024-12-17 00:53:55+00:00| seen| https://t.me/cvedetector/13053...

CVE-2024-55451

CVE-2024-55451 affects UJCMS 9.6.3. A Stored XSS exists in the authenticated SVG file upload/viewing functionality due to insufficient sanitization of embedded attributes in SVGs. When viewed by other backend users, it can execute arbitrary JavaScript in their browser context, potentially stealin...