CVE-2026-122095

The AsiaInfo BSS Platform versions 9.2.0 to 9.2.37 are vulnerable to a stored cross-site scripting (XSS) vulnerability in the menu icon upload function. An authenticated user with ordinary privileges can upload an SVG file containing embedded JavaScript. While normal menu rendering using an HTML ...