CVE-2025-61417

creationtimestamp| type| source ---|---|--- 2025-10-20 15:33:19+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115407218187122436 2025-10-20 18:05:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nfrk7fbm2f 2025-10-22 08:04:52+00:00| seen|...

CVE-2025-61417

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...