CVE-2025-0716 AngularJS improper sanitization in SVG '<image>' element

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and also negatively affect...

CVE-2025-0716

CVE-2025-0716 is a vulnerability in AngularJS where improper sanitization of the href and xlink:href attributes in SVG elements can bypass image-source restrictions and enable Content Spoofing, potentially affecting performance due to large or slow-loading images. Affects all versions of Angular...

PT-2025-18187

Name of the Vulnerable Software and Affected Versions AngularJS versions prior to the end of life, as no specific fixed version is mentioned and the project is End-of-Life. Description The issue is related to improper sanitization of the href and xlink:href attributes in SVG elements, allowing...

CVE-2025-0716: Incomplete Filtering of Special Elements

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in ' ' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and also negatively affect...

AngularJS 安全漏洞

AngularJS is a TypeScript-based open source web application framework from AngularJS Open Source. A security vulnerability exists in AngularJS that stems from improper cleanup of the href and xlink:href attributes in SVG elements, which could lead to content spoofing and performance issues...

CVE-2024-8372

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects AngularJS versions 1.3.0-rc.4 and...

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

PT-2025-17591 · Unknown · Rosariosis

Name of the Vulnerable Software and Affected Versions: Francois Jacquet RosarioSIS version 12.0.0 Description: The issue is related to a content spoofing vulnerability found in the Theme configuration under the My Preferences module. This allows attackers to manipulate application settings...

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

RosarioSIS 安全漏洞

RosarioSIS is a free and open source student information system open sourced by Francois Jacquet. It is used to manage students, create reports and make the right decisions. A security vulnerability exists in RosarioSIS version v12.0.0 that stems from content spoofing in the theme configuration,...

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

CVE-2025-29621: Authentication Bypass by Spoofing

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

CVE-2025-29621

The RosarioSIS v12.0.0 student information system is affected by a content spoofing vulnerability within the Theme configuration under the My Preferences module. This flaw allows an attacker to manipulate application settings . As a temporary workaround, it is recommended to restrict access to th...

CVE-2025-3475

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...

CVE-2025-32259 WordPress WP ULike plugin <= 4.7.9.1 - Content Spoofing Vulnerability

Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through = 4.7.9.1...

CVE-2025-32259

CVE-2025-32259 describes a Missing Authorization vulnerability in the WP ULike plugin for WordPress. The exploit is demonstrated via an unauthenticated PoC against the AJAX endpoint wp_ulike_process, enabling an unauthenticated user to spoof “like” actions on content (post, comment, etc.). Affect...

CVE-2025-32259 WordPress WP ULike plugin <= 4.7.9.1 - Content Spoofing Vulnerability

Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through = 4.7.9.1...

CVE-2025-3475

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...