Lucene search
+L

132 matches found

Cvelist
Cvelist
added 2026/09/14 5:13 p.m.33 views

CVE-2026-54087 EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField

EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, FileField and ImageField can accept browser-executable uploads while templates/crud/field/file.html.twig links to stored files for inline same-origin rendering without a download attribute or...

7.6CVSS0.00297EPSS
SaveExploits0References3
Rows per page
Query Builder