EUVD-2025-27976

Malicious code in bioql PyPI...

CVE-2025-40663

Stored Cross-Site Scripting XSS vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time...

CVE-2025-40663

Stored Cross-Site Scripting XSS vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time...

CVE-2025-40663

CVE-2025-40663 describes a Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos v23.02.01.17 (i2A). An authenticated attacker can upload a malicious SVG image into a user’s personal space at /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments, leading to script execution withi...

CVE-2025-40663 Stored Cross-Site Scripting (XSS) in i2A-Cronos by i2A

Stored Cross-Site Scripting XSS vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time...

CVE-2025-40663 Stored Cross-Site Scripting (XSS) in i2A-Cronos by i2A

Stored Cross-Site Scripting XSS vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time...

i2A-Cronos 跨站脚本漏洞

i2A-Cronos is a sports center management and access control solution from i2A-Cronos. A cross-site scripting vulnerability exists in i2A-Cronos version 23.02.01.17, which originates from stored cross-site scripting and could lead to the execution of malicious code...

PT-2025-22896 · Unknown · I2A-Cronos

Name of the Vulnerable Software and Affected Versions: i2A-Cronos version 23.02.01.17 Description: A Stored Cross-Site Scripting XSS issue allows an authenticated attacker to upload a malicious SVG image into the user's personal space in...