CVE-2026-55451

creationtimestamp| type| source ---|---|--- 2026-09-15 05:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvjuc7gp4r2r...

CVE-2024-55451

creationtimestamp| type| source ---|---|--- 2024-12-17 00:53:55+00:00| seen| https://t.me/cvedetector/13053...

CVE-2024-55451

A Stored Cross-Site Scripting (XSS) vulnerability exists in the authenticated SVG file upload and viewing functionality of UJCMS version 9.6.3 . The root cause is the insufficient sanitization of embedded attributes within uploaded SVG files. A malicious actor can upload a crafted SVG file which,...