Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/10/21 12:23 a.m.2 views

CVE-2025-61417

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...

8.8CVSS6.1AI score0.0009EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2025/10/20 3:30 p.m.4 views

TastyIgniter vulnerable to Cross-Site Scripting

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...

8.8CVSS6.2AI score0.0009EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2025/10/20 3:15 p.m.2 views

CVE-2025-61417

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...

8.8CVSS0.0009EPSS
Exploits1References2
OSV
OSV
added 2025/10/20 3:15 p.m.2 views

CVE-2025-61417

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...

8.8CVSS6.1AI score0.0009EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/10/20 12:0 a.m.7 views

CVE-2025-61417

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...

0.0009EPSS
Exploits1References2
Rows per page
Query Builder