CVE-2025-56515

CVE-2025-56515 Fiora 채팅 애플리케이션의 교차 사이트 스크립팅XSS 취약점 CVE-2025-56515: Fiora 채팅 애플리케이션의 교차 사이트 스크립팅XSS 취약점 취약점 개요 CVE ID : CVE-2025-56515 취약점 유형 : 교차 사이트 스크립팅XSS 공격 유형 : 원격 영향 : 코드 실행 영향받는 제품 : Fiora 채팅 애플리케이션 버전 1.0.0 공급업체 : suisuijiang 발견자 : Kaio Mendonça Pereira 공급업체 확인 : 예 참고 자료 : Fiora GitHub 저장...

EUVD-2025-32019

Malicious code in bioql PyPI...

CVE-2025-56514

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users...

PT-2025-40248

Name of the Vulnerable Software and Affected Versions Fiora chat application version 1.0.0 Description A Cross Site Scripting XSS issue exists in the Fiora chat application. The application allows the execution of arbitrary JavaScript code when malicious SVG files are rendered by other users...

CVE-2025-56515: Improper Neutralization of Input During Web Page Generation

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56514: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users...