CVE-2025-41084

creationtimestamp| type| source ---|---|--- 2026-01-20 11:43:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcu3cc7vy52g...

CVE-2025-41084 Stored Cross-Site Scripting (XSS) in Sesame web application

Stored Cross-Site Scripting XSS vulnerability in Sesame web application, due to the fact that uploaded SVG images are not properly sanitized. This allows attackers to embed malicious scripts in SVG files by sending a POST request using the 'logo' parameter in '/api/v3/companies//logo', which are...