CVE-2025-13069

The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.1.3. This is due to insufficient file type validation detecting ICO files, allowing double extension files with the appropriate magic bytes to bypass sanitizati...

EUVD-2025-197965

The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.1.2. This is due to insufficient file type validation detecting ICO files, allowing double extension files with the appropriate magic bytes to bypass sanitizati...

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI Inc. A code issue vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadIcon method of the /application/index/controller/Icon.php file...

PT-2021-24029

Name of the Vulnerable Software and Affected Versions: UiPath App Studio version 21.4.4 Description: An issue was discovered in the file-upload functionality for uploading icons when attempting to create new Apps, allowing for a persistent XSS vulnerability. An attacker with minimal privileges ca...