CVE-2025-61183

VaahCMS 2.3.1 is affected by a Stored XSS via the Avatar Upload endpoint in storeAvatar() of UserBase.php. The vulnerability stems from saving the uploaded file to a public path before content/MIME-type validation, allowing an attacker to place a crafted SVG that can execute script when rendered....

EUVD-2007-3823

Malware in sbrugna...

EUVD-2014-8980

Malware in sbrugna...

EUVD-2020-13374

Malware in sbrugna...

EUVD-2021-21946

Malware in sbrugna...

EUVD-2015-2197

Malware in sbrugna...

EUVD-2016-2011

Malware in sbrugna...

EUVD-2020-10400

Malware in sbrugna...

EUVD-2005-0260

Malware in sbrugna...

EUVD-2005-1034

Malware in sbrugna...

EUVD-2006-2283

Malware in sbrugna...

EUVD-2007-2231

Malware in sbrugna...

EUVD-2006-4438

Malware in sbrugna...

EUVD-2005-4616

Malware in sbrugna...

EUVD-2002-2324

Malware in sbrugna...

EUVD-2013-3913

Malware in sbrugna...

EUVD-2021-23380

Malware in sbrugna...

EUVD-2018-11933

Malware in sbrugna...

EUVD-2006-2530

Malware in sbrugna...

EUVD-2020-21823

Malware in sbrugna...