CVE-2025-56514

CVE-2025-56514: Fiora 채팅 애플리케이션의 교차 사이트 스크립팅XSS 취약점 개요 CVE-2025-56514 로 식별된 교차 사이트 스크립팅XSS 취약점이 Fiora 채팅 애플리케이션 버전 1.0.0에 영향을 미칩니다. 이 취약점은 인증된 사용자가 그룹 아바타 변경 기능을 통해 악성 SVG 파일을 업로드하여 다른 사용자의 브라우저 컨텍스트에서 임의의 JavaScript를 실행할 수 있도록 합니다. 취약점 세부 정보 취약점 유형 : 교차 사이트 스크립팅XSS 공격 유형 : 원격 영향 : 코드 실행 영향을 받는 제...

CVE-2025-56515

CVE-2025-56515 Vulnerabilità di Cross-Site Scripting XSS nell'applicazione di chat Fiora CVE-2025-56515: Vulnerabilità di Cross-Site Scripting XSS nell'applicazione di chat Fiora Panoramica della vulnerabilità ID CVE : CVE-2025-56515 Tipo di vulnerabilità : Cross-Site Scripting XSS Tipo di attacc...

EUVD-2025-32019

Malicious code in bioql PyPI...

EUVD-2025-32031

Malicious code in bioql PyPI...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56514

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users...

GHSA-HG3J-6PMH-MVJR Fiora chat user avatar is vulnerable to XSS via SVG files

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows arbitrary JavaScript execution when malicious SVG files are rendered by other users...

Fiora chat user avatar is vulnerable to XSS via SVG files

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows arbitrary JavaScript execution when malicious SVG files are rendered by other users...

Fiora chat group avatar is vulnerable to XSS via SVG files

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56514

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56514

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users...

CVE-2025-56514

A CVE entry for Fiora chat application 1.0.0 (CVE-2025-56514) documents a Cross Site Scripting (XSS) vulnerability arising when malicious SVG files are rendered by other users. Concrete details from connected sources show the vulnerability affects Fiora 1.0.0 and involves uploading or rendering a...

CVE-2025-56515

CVE-2025-56515 affects Fiora chat application 1.0.0. The issue is in the user avatar SVG upload: content is not validated, allowing SVGs with foreignObject, iframe elements and JavaScript event handlers (e.g., onmouseover) to be uploaded and stored. When rendered, these SVGs execute arbitrary Jav...

CVE-2025-56514

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users...

Fiora 安全漏洞

Fiora - is a chat application by yinxin630 individual developer. A security vulnerability exists in Fiora version 1.0.0, which stems from the user avatar upload feature not validating the content of SVG files, which could lead to the execution of arbitrary JavaScript code...

Fiora 跨站脚本漏洞

Fiora - is a chat application by yinxin630 individual developer. A cross-site scripting vulnerability exists in Fiora version 1.0.0, which originates from the execution of arbitrary JavaScript while rendering a malicious SVG file, and could lead to a cross-site scripting attack...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

📄 Fiora Chat 1.0.0 Cross Site Scripting

Fiora Chat version 1.0.0 suffers from a cross site scripting vulnerability. CVE-2025-56514: Cross Site Scripting XSS Vulnerability in Fiora Chat Application Overview A Cross Site Scripting XSS vulnerability, identified as CVE-2025-56514, affects the Fiora chat application version 1.0.0. This...

PT-2025-40248

Name of the Vulnerable Software and Affected Versions Fiora chat application version 1.0.0 Description A Cross Site Scripting XSS issue exists in the Fiora chat application. The application allows the execution of arbitrary JavaScript code when malicious SVG files are rendered by other users...