CVE-2026-90931: Improper Neutralization of Input During Web Page Generation

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline...

PT-2024-30112

Name of the Vulnerable Software and Affected Versions SVGator WordPress plugin versions 1.2.6 and earlier Description The issue allows users with at least the author role to upload SVG files containing malicious JavaScript, enabling Stored XSS attacks due to the lack of sanitization of SVG file...