CVE-2025-13415 icret EasyImages SVG Image upload.php cross site scripting

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely...

CVE-2025-13415

CVE-2025-13415 affects icret EasyImages up to 2.8.6. The issue lies in the SVG Image Handler’s /app/upload.php where manipulating the File parameter enables cross-site scripting. Attacks are described as remotely initiable. The Red Hat and other feeds corroborate the same vulnerability details. N...

EasyImages 代码注入漏洞

EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A code injection vulnerability exists in EasyImages 2.8.6 and earlier versions, which stems from improper manipulation of the parameter File in the component SVG...

PT-2025-47537

Name of the Vulnerable Software and Affected Versions icret EasyImages versions up to 2.8.6 Description A flaw exists in icret EasyImages, specifically within the SVG Image Handler component, affecting the file /app/upload.php. Manipulation of the File argument can lead to cross site scripting...

CVE-2023-33599

EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting XSS via viewlog.php...

CVE-2023-1181

Cross-site Scripting XSS - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7...

CVE-2023-7098

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexi...

CVE-2023-7098

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexi...

Path traversal

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexi...

CVE-2023-7098 icret EasyImages hide.php path traversal

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexi...

CVE-2023-7098 icret EasyImages hide.php path traversal

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexi...

CVE-2023-7098

A vulnerability (CVE-2023-7098) affects icret EasyImages 2.8.3. The issue resides in unknown code within app/hide.php, where manipulating the key argument enables path traversal (e.g., ../filedir). Remote exploitation is possible but the attack complexity is high; exploitation has been disclosed ...

CVE-2023-7098 icret EasyImages hide.php path traversal

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexi...

EasyImages Path Traversal Vulnerability

EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A path traversal vulnerability exists in icret EasyImages version 2.8.3, which stems from unknown code in app/hide.php that causes path traversal via the parameter...

PT-2023-32872 · Unknown · Icret Easyimages

Name of the Vulnerable Software and Affected Versions: icret EasyImages version 2.8.3 Description: A problematic vulnerability was found in icret EasyImages, affecting unknown code of the file app/hide.php. The manipulation of the key argument leads to path traversal, allowing an attacker to acce...

CVE-2023-33599

The CVE-2023-33599 entry concerns EasyImages2.0, affected at least up to version 2.8.1, with a Cross Site Scripting (XSS) vulnerability exploitable via viewlog.php. The available connected documents confirm the vulnerable component/file and the attack vector (viewlog.php); however, they do not pr...

EasyImages 跨站脚本漏洞

EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A security vulnerability exists in EasyImages 2.0 version 2.8.1, which stems from a problem with the viewlog.php file and can be exploited by an attacker to conduct...

CVE-2023-33599

EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting XSS via viewlog.php...

EasyImages 跨站脚本漏洞

EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A cross-site scripting vulnerability exists in versions prior to EasyImages 2.6.7, which stems from a stored cross-site scripting XSS vulnerability...

EasyImages 安全漏洞

EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A security vulnerability exists in EasyImages version v2.0, which stems from the presence of an arbitrary file download vulnerability that can be exploited by an...