CVE-2026-17019

The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user w...

CVE-2026-17019

The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user w...

CVE-2026-17019 JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)

The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user w...

CVE-2026-17019

The JetEngine WordPress plugin (versions prior to 3.8.13.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitize uploaded SVG files before they are stored and served, combined with inadequate restrictions on who can perform uploads. This allows unauthent...

EUVD-2026-55034

The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user w...

CVE-2026-17019 JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)

The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user w...

CVE-2026-72594: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...

PT-2026-69360

Name of the Vulnerable Software and Affected Versions JetEngine WordPress plugin versions prior to 3.8.13.1 Description Stored Cross-Site Scripting occurs because the software fails to sanitize uploaded SVG files before storing and serving them. Additionally, the system does not adequately restri...

CVE-2026-17019: Improper Neutralization of Input During Web Page Generation

The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user w...

PT-2026-69467

Name of the Vulnerable Software and Affected Versions fastschema versions prior to 0.15.2 Description A stored cross-site scripting XSS issue exists where a low-privileged authenticated user can upload an SVG file containing malicious JavaScript. This occurs because the PutMultipart function in...

PT-2026-69478

Name of the Vulnerable Software and Affected Versions lobehub/lobe-chat versions prior to 2.2.14 Description A stored cross-site scripting XSS issue exists where a low-privileged authenticated user can inject arbitrary JavaScript into the application. This occurs because the avatar upload handler...

PT-2026-69460

Name of the Vulnerable Software and Affected Versions Bludit version 4.0.0-beta Description A stored cross-site scripting XSS issue allows a low-privileged authenticated user with the Author role to inject arbitrary JavaScript. This occurs when a crafted SVG file is uploaded as the site logo via...

CVE-2026-72576: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user Author role to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo...

CVE-2026-72583: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check...

CVE-2026-16559 YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload

The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site's origin when...

CVE-2026-16559

The YMC Filter WordPress plugin (versions prior to 3.12.9 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to sanitize SVG files uploaded through its icon upload feature. Users with the Author role or higher can upload files containing malicious JavaScript , which then execut...

CVE-2026-16559 YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload

The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site's origin when...

CVE-2026-16559: Improper Neutralization of Input During Web Page Generation

The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site's origin when...

PT-2026-69173

Name of the Vulnerable Software and Affected Versions YMC Filter versions prior to 3.12.9 Description The plugin fails to sanitize SVG files uploaded through an icon upload feature. This allows users with the Author role or higher to upload a file containing JavaScript, leading to Stored Cross-Si...

Mermaid allows CSS injection applying to sibling elements of the diagram

Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with mermaid-X, sibling and + combinators can still escape the Mermaid container and inject styles to DOM elements adjacent to the diagram . Most users of mermaid would not be affected by this...