CVE-2025-56514

CVE-2025-56514：Fiora 聊天应用中的跨站脚本（XSS）漏洞 概述 标识为 CVE-2025-56514 的跨站脚本（XSS）漏洞影响 Fiora 聊天应用 1.0.0 版本。该漏洞允许已认证用户通过群组头像更换功能上传恶意 SVG 文件，从而在另一个用户的浏览器上下文中执行任意 JavaScript。 漏洞详情 漏洞类型 ：跨站脚本（XSS） 攻击类型 ：远程 影响 ：代码执行 受影响产品代码库 ：Fiora 1.0.0 厂商 ：suisuijiang 发现者 ：Kaio Mendonca Pereira 受影响组件 Fiora 聊天应用中的以下组件受到影响： 后端...

EUVD-2022-3605

Malicious code in bioql PyPI...

📄 Fiora Chat 1.0.0 Cross Site Scripting

Fiora Chat version 1.0.0 suffers from a cross site scripting vulnerability. CVE-2025-56514: Cross Site Scripting XSS Vulnerability in Fiora Chat Application Overview A Cross Site Scripting XSS vulnerability, identified as CVE-2025-56514, affects the Fiora chat application version 1.0.0. This...

CVE-2020-5501

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

BIT-PHPBB-2020-5501

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

GHSA-CPQC-G4R8-6HXG phpBB Cross-Site Request Forgery (CSRF)

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

phpBB Cross-Site Request Forgery (CSRF)

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

phpBB cross-site request forgery vulnerability (CNVD-2020-03224)

phpBB is a set of open source and PHP-based Web forum software . The software has support for multiple languages , multiple databases and customized layout and so on. A cross-site request forgery vulnerability exists in phpBB. An attacker can use this vulnerability to modify the group avatar...

CVE-2020-5501

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

CVE-2020-5501

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

CVE-2020-5501

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

Cross site request forgery (csrf)

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

CVE-2020-5501

phpBB 3.2.8 allows a CSRF attack that can modify a group avatar...

PT-2020-18482 · Phpbb Limited · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB version 3.2.8 Description: The issue allows for a CSRF attack, which can be used to modify a group avatar. Recommendations: For phpBB version 3.2.8, update to a newer version that contains a fix for this issue...

GitLab: GitHub import allows user to create child group under existing namespace

When importing a GitHub repository on GitLab, a request is made to /import/github. The user is allowed to pass along a target namespace where they want to add the repository. In this process, the code will create the namespace if it doesn't exist already. However, this can be used to create a...