EUVD-2026-92756

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization...

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

GHSA-8575-CR6V-7JH4 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

NPM: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

NPM: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization vulnerability discovered by ? in WordPress Npm ghost versions = 4.22.0, 6.65.0...

EUVD-2026-93508

Payload: Bypassed sanitization of user uploaded SVGs...

Payload: Bypassed sanitization of user uploaded SVGs

Impact A malicious SVG file upload could bypass sanitization, be stored, and execute attacker-controlled JavaScript XSS after a user downloads it and opens it. You are affected if: - You have a collection configured to upload and allow SVG files which can then be downloaded by users. Patches The...

GHSA-2PWP-2369-8FG3 Payload: Bypassed sanitization of user uploaded SVGs

Impact A malicious SVG file upload could bypass sanitization, be stored, and execute attacker-controlled JavaScript XSS after a user downloads it and opens it. You are affected if: - You have a collection configured to upload and allow SVG files which can then be downloaded by users. Patches The...

NPM: Payload: Bypassed sanitization of user uploaded SVGs

NPM: Payload: Bypassed sanitization of user uploaded SVGs vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

CVE-2025-63830

📂 CKFinder 1.4.3 – 悪意のあるSVGアップロードによる保存型クロスサイトスクリプティング（XSS） CVE ID: CVE-2025-63830 🧭 概要 保存型クロスサイトスクリプティング（XSS）の脆弱性が CKFinder v1.4.3 で確認されました。 この問題はファイルアップロード 機能にあり、アクティブコンテンツを含むSVGファイルを適切にサニタイズできないことに起因します。 その結果、攻撃者は、アップロードされたファイルが表示またはプレビューされるときに、被害者のブラウザのコンテキストで任意のJavaScriptコードを実行できます。 ⚙️ 詳細 発見名 ...

CVE-2023-23924

CVE-2023-23924 Dompdf 在 SVG 解析时存在 URI 校验失败漏洞 · CVE-2023-23924 · GitHub 安全公告数据库 https://github.com/advisories/GHSA-3cw5-7cxw-v5qg 运行 Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php 检查 检查 "whoami" 命令是否正在运行。 2.0.1 ❯ php cve202323924.php PHP Warning:...

CVE-2026-105862

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a use...

CVE-2026-105862

The Payload headless content management system is vulnerable in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . A collection allowing downloadable SVG uploads can store a malicious file that bypasses sanitization. When a user downloads and opens the SVG, it executes attacker-c...

CVE-2026-105862 Payload: Bypassed sanitization of user uploaded SVGs

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a use...

CVE-2026-105862 Payload: Bypassed sanitization of user uploaded SVGs

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a use...

CVE-2026-105862

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a use...

CVE-2026-105862 Payload: Bypassed sanitization of user uploaded SVGs

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a use...

Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098

Magnolia CMS レスポンス アップロードは受け入れられ、SVGが連絡先またはアセットビューでレンダリングされるとペイロードが実行されます。 解決策 Magnolia CMS 6.2.20のリリースノートを参照し、修正バージョンにアップグレードしてください。 開示のタイムライン 17/06/2022: Magnolia CMS 6.2.20リリース、アセットアップロード処理を強化 07/07/2022: CVE-2022-33098がNVDにより公開 14/07/2022: NVDの初期分析がCVSSおよびCWEデータで更新 参考文献 1...

CVE-2026-84370

A flaw was found in SVGO SVG Optimizer, a Node.js library for optimizing SVG files. The removeScripts plugin, intended to filter executable links, incompletely processes namespace-prefixed SVG anchor elements and fails to remove ASCII control characters before validating URL schemes. A remote...

CVE-2026-105708

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2026-105708 imgproxy SVG svg.go sanitizeElement cross site scripting

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has...