CVE-2024-48591

CVE-2024-48591 漏洞披露：Inflectra SpiraTeam 7.2.00 中的 XSS 描述 Inflectra SpiraTeam 7.2.00 版本存在跨站脚本（XSS）漏洞，通过上传特制的 SVG 文件，在直接查看该文件时可执行 JavaScript。 漏洞类型 跨站脚本（XSS） 厂商 Inflectra 受影响产品 SpiraTeam 7.2.00 受影响组件 TestRuns 部分 攻击类型 远程 影响 权限提升 ：允许攻击者可能获得更高级别的访问权限。 攻击向量 攻击者可以上传包含 JavaScript 的特制 SVG...

CVE-2025-68116

CVE-2025-68116 Autor: @x0root Vulnerabilidad: Cross-Site Scripting XSS Almacenado mediante subidas renderizables por el navegador SVG / HTML Software afectado: FileRise Nota: GHSA-qrcv-vjvf-fr29 introdujo una mitigación que impedía que los...

CVE-2026-100676

January, the media proxy/embed service of stoatchat stoatchat/stoatchat, before version 0.15.5 improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml. An unauthenticated remote attacker who causes the service to proxy an attacker-hosted SVG e.g...

CVE-2020-13094

Título: Dolibarr 11.0.3 - Cross-Site Scripting Persistente Autor: Mehmet Kelepce / Gais Cyber Security Fecha: 2020-04-14 Proveedor: https://www.dolibarr.org/ ID de autor en Exploit-DB: 8763 Explotable remotamente: Sí Lenguaje de programación dinámica: PHP Puntuación base CVSSv3: 7.4 AV:N, AC:L,...

CVE-2025-3568

CVE-2025-3568 Escalada de privilegios mediante un archivo SVG malicioso Resumen Se ha identificado una vulnerabilidad de seguridad en Krayin CRM 2.1.0 que permite a un usuario con pocos privilegios escalar privilegios engañando a un administrador para que abra un archivo SVG malicioso. Este explo...

CVE-2026-100676

The media proxy/embed service of stoatchat (stoatchat/stoatchat) before version 0.15.5 contains a vulnerability where it improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml . An unauthenticated remote attacker can exploit this via the /prox...

EUVD-2026-87649

January, the media proxy/embed service of stoatchat stoatchat/stoatchat, before version 0.15.5 improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml. An unauthenticated remote attacker who causes the service to proxy an attacker-hosted SVG e.g...

CVE-2026-100676 stoatchat before 0.15.5 Local Filesystem Read via SVG

January, the media proxy/embed service of stoatchat stoatchat/stoatchat, before version 0.15.5 improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml. An unauthenticated remote attacker who causes the service to proxy an attacker-hosted SVG e.g...

CVE-2026-100676 stoatchat before 0.15.5 Local Filesystem Read via SVG

January, the media proxy/embed service of stoatchat stoatchat/stoatchat, before version 0.15.5 improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml. An unauthenticated remote attacker who causes the service to proxy an attacker-hosted SVG e.g...

CVE-2023-24278

CVE-2023-24278 - Squidex 中的反射型 XSS 漏洞 概述 CVE ID: CVE-2023-24278 受影响产品: Squidex 7.4.0 之前的所有版本 报告者: Ioannis Christodoulakos 本仓库提供了关于 Squidex 开源无头 CMS 软件中发现的两个反射型跨站脚本（XSS）漏洞的信息及利用方式。这些漏洞影响 7.4.0 之前的所有版本，攻击者可通过向 /squid.svg 端点的特定查询参数中注入代码，在受害者浏览器中执行恶意 JavaScript 代码。 漏洞详情 漏洞是由于 /squid.svg 端点的 text 和...

poc-cve-xss-uploading-svg

详细信息 标题：WordPress CMS 的 "Uploading SVG, WEBP and ICO files" 插件中存在已验证的反射型跨站脚本攻击漏洞 日期：2023-08-10 作者：Danilo Albuquerque 厂商主页：https://wordpress.org 软件链接：https://wordpress.org/download 版本：WordPress 6.3 插件名称及版本：Uploading SVG, WEBP and ICO files 1.2.1 测试环境：Brave（版本 1.50.119 Chromium: 112.0.5615.121（官方版本...

CVE-2025-65675

CVE-2025-65675 Classroomio LMS 0.1.13 中存在存储型跨站脚本（XSS）漏洞，允许经过身份验证的攻击者通过精心构造的 SVG 个人资料图片执行任意代码。发现者：Rivek Raj Tamang RivuDon，印度锡金。 受影响产品：ClassroomIO 受影响版本：0.1.13 发现者：Rivek Raj Tamang RivuDon，印度锡金 漏洞详情 存储型跨站脚本 摘要 Classroomio LMS 0.1.13 版本存在存储型跨站脚本（XSS）漏洞，应用程序未能对 SVG 个人资料图片上传进行充分过滤。经过身份验证的攻击者可以上传包含嵌入式...

CVE-2025-68461

CVE-2025-68461 Roundcube Webmail anterior a 1.5.12 y 1.6 anterior a 1.6.12 es propenso a una vulnerabilidad de Cross-Site-Scripting XSS a través de la etiqueta animate en un documento SVG. ¿Cómo funciona este método de detección? Extrae la versión de Roundcube del campo JSON "rcversion" en la...

CVE-2026-18320

Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to remove script-capable attributes such as event handlers e.g., 'onload', 'onerror'. An attacker could supply a document...

CVE-2023-4634

CVE-2023-4634 Exploit de RCE para el plugin Media-Library de WordPress 3.10 CVE-2023-4634 Información Patrowl descubrió una vulnerabilidad de RCE no autenticada en el plugin Media-Librairy-Assistant de WordPress en versiones 3.10. El exploit no es trivial y requiere solo una pequeña configuración...

CVE-2026-18320

Readwise Reader for Android version 8.7.2 is vulnerable to a stored cross-site scripting (XSS) flaw in the article body sanitization component. The root cause is a sanitize-html configuration that uses a wildcard attribute rule, permitting all attributes on SVG and PATH elements. This allows scri...

CVE-2026-18320 CVE-2026-18320

Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to remove script-capable attributes such as event handlers e.g., 'onload', 'onerror'. An attacker could supply a document...

EUVD-2026-87231

Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to remove script-capable attributes such as event handlers e.g., 'onload', 'onerror'. An attacker could supply a document...

VectorFreed

VectorFreed Abstract This document introduces "VectorFreed", a vulnerability chain that begins with a use-after-free I @rafabd1 found in librsvg CVE-2026-96889. In a Node.js/Sharp/libvips build, this bug led to command execution. It covers the bug, the paths confirmed in applications so far, and...

CVE-2025-66470

Escáner XSS de NiceGUI - CVE-2025-66470 📸 Captura de pantalla Escáner rápido y sencillo para detectar CVE-2025-66470 - vulnerabilidad XSS en el componente ui.interactiveimage de NiceGUI. 🔍 Detalles de la vulnerabilidad Campo| Valor ---|--- CVE| CVE-2025-66470 GHSA| GHSA-2m4f-cg75-76w2 Componente|...