CVE-2023-50465

MonicaHQ XSS Exploitation of MonicaHQ XSS Create an account Create a contact In Documents, upload a malicious SVG file root@kitploit: alert"Monicahq XSS Poc"; Access the uploaded file...

CVE-2026-14856-TastyIgniter

CVE-2026-14856: Stored XSS to Account Takeover in TastyIgniter v4.3.0 📌 Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the Media Manager in TastyIgniter v4.3.0. Due to insufficient validation and sanitization of uploaded .svg files, an...

EUVD-2026-77677

EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, FileField and ImageField can accept browser-executable uploads while templates/crud/field/file.html.twig links to stored files for inline same-origin rendering without a download attribute or...

CVE-2023-33977

CVE-2023-33977 kiwitcms/kiwi 中通过 SVG 上传导致的存储型 XSS - 作者：M Nadeem Qazi 描述 本仓库针对在 kiwitcms/kiwi 应用中发现并被分配了 CVE-2023-33977 标识符的存储型 XSS 漏洞进行了说明。该漏洞允许通过 SVG 文件上传执行恶意脚本。当上传包含恶意载荷的 SVG 文件时，脚本会在受害者浏览器的上下文中执行，可能导致数据窃取、账户失陷以及恶意软件的传播。 概念验证 有关此漏洞的详细概念验证可参阅以下视频： 影响 该漏洞影响重大，对 kiwitcms/kiwi...

CVE-2026-90931

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline...

CVE-2022-32060

Snipe-IT Version v6.0.2 Vulnerability Explanation: An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file. Attack Vectors: We found a vulnerability file upload, when we upload malicious file...

CVE-2026-90931

LaraDashboard versions 0.9.0 through 1.2.2 are affected by a stored XSS vulnerability caused by failure to sanitize SVG file content during media upload. An authenticated user with only the media.create permission can upload a malicious SVG file containing embedded script tags. When any user—incl...

EUVD-2026-77449

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline...

CVE-2026-90931 LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline...

CVE-2024-34452

CVE-2024-34452 - Cross-Site Scripting XSS Vulnerability in CMSimpleXH Overview A cross-site scripting XSS vulnerability has been identified in CMSimpleXH version 1.7.6. This vulnerability allows authorized users to upload SVG files containing malicious JavaScript code. The issue stems from...

CVE-2023-34845

CVE-2023-34845 Vulnerability POC for CVE-2023-34845 Vulnerability I found a cross-site scripting attack on the new content creating page http://localhost:800/admin/new-content it will execute the script in user context allowing the attacker to access any cookies or sessions tokens retained by the...

PT-2026-91207

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline...

thingsboard-ssrf-cve-2025-34282

CVE-2025-34282 — ThingsBoard SSRF via SVG Image Upload Overview Server-Side Request Forgery SSRF vulnerability in ThingsBoard IoT Platform versions before 4.2.1. An attacker with Tenant Admin access can upload a crafted SVG file containing an internal URL reference via the Image Upload Gallery...

CVE-2025-50738-PoC

CVE-2025-50738 这非常简单，通过SVG实现存储型XSS是野外发现跨站脚本漏洞的常见方式，所以这是我首先尝试的方法之一。 我通过Pikapods部署了usememos，然后导航到首页并创建了一个账户。 使用该账户，我创建了一个"想法"： 然后我创建了一个SVG文件，包含以下payload： root@kitploit: 该payload执行JavaScript，导致打印'document.domain'（所以它只显示'.pikapod.net'）。 我选择了文件，在本例中它叫xss6.svg，然后我可以"复制图片地址"：...

CVE-2024-7703

CVE-2024-7703 root@kitploit: Exploit CVE-2024-7703: Cross-Site Scripting XSS Almacenado mediante Carga de Archivos SVG en el Plugin ARMember de WordPress Descripción general Este repositorio contiene un exploit de prueba de concepto PoC para la vulnerabilidad identificada como CVE-2024-7703. La...

CVE-2023-39115

CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...

CVE-2025-61183

CVE-2025-61183 安全でないSVG処理を介したユーザーアバターアップロードにおける格納型XSS 概要 MediaController.php のファイルアップロードロジックと UserBase.php の storeAvatar メソッドの相互作用において、格納型クロスサイトスクリプティング（XSS）の脆弱性が確認されました。これにより、低権限の登録ユーザーがJavaScriptを埋め込んだ悪意のあるSVGファイルをアップロードできるようになります。この脆弱性は、コンテンツやMIMEタイプの検証が行われる前に...

CVE-2024-48591

CVE-2024-48591 Divulgación de Vulnerabilidad: XSS en Inflectra SpiraTeam 7.2.00 Descripción La versión 7.2.00 de Inflectra SpiraTeam es vulnerable a Cross-Site Scripting XSS a través de la carga de archivos SVG especialmente diseñados, que pueden ejecutar JavaScript cuando se ven directamente. Ti...

poc-cve-xss-uploading-svg

Details Title: Authenticated Reflected Cross-Site Scripting in "Uploading SVG, WEBP and ICO files" Plugin for WordPress CMS Date: 2023-08-10 Author: Danilo Albuquerque Vendor Homepage: https://wordpress.org Software Link: https://wordpress.org/download Version: WordPress 6.3 Plugin's Name and...

CVE-2025-65675

CVE-2025-65675 Stored Cross site scripting XSS vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures. Discovered by - Rivek Raj Tamang RivuDon, Sikkim, India. Affected Product: ClassroomIO Affected Version: 0.1.13...