CVE-2025-60445

A stored Cross-Site Scripting (XSS) vulnerability exists in XunRuiCMS version 4.7.1 . The flaw is caused by insufficient validation of SVG file uploads within the dayrui/Fcms/Library/Upload.php component. An attacker can exploit this to inject malicious JavaScript code, which will execute in the ...