CVE-2025-54962

🔥 CVE-2025-54962 — Insecure File Upload in OpenPLC Runtime Webserver OpenPLC Runtime ≤ 2024-12-31 — Stored XSS, CSRF 📌 Summary I discovered a vulnerability in the OpenPLC Runtime webserver released version: 2024-12-31 that allows authenticated users to upload arbitrary files e.g., .html, .svg as...