CVE-2026-5615

CVE-2026-5615 — VvvebJs Stored Cross-Site Scripting RXSS Overview This repository contains a Python proof-of-concept PoC script demonstrating a Stored Cross-Site Scripting RXSS vulnerability affecting VvvebJs ⚠️ This project is intended strictly for authorized security testing , educational...

CVE-2026-14856-TastyIgniter

CVE-2026-14856: Stored XSS to Account Takeover in TastyIgniter v4.3.0 📌 Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the Media Manager in TastyIgniter v4.3.0. Due to insufficient validation and sanitization of uploaded .svg files, an...

CVE-2024-2961-XXE-Exploit

CVE-2024-2961 CNEXT XXE 通道适配利用脚本 将 Ambionics 官方 cnext-exploits 的 PHP 文件读取 - RCE 利用脚本，适配到 SVG 上传 + XXE 任意文件读取 场景（PolarisCTF 2026 "头像上传器" 一类题目）。 前置条件 目标：Linux + glibc 更新 avatarname - 请求解析接口回显。 2. 过滤器分隔符| - ：XML 实体 URL 中含 时 libxml 解析失败（实测 DOMDocument 返回空文档）； 支持不带前缀的裸过滤器按 分隔，等价于 。...

CVE-2025-56515

CVE-2025-56515 Cross-Site Scripting XSS Vulnerability in Fiora Chat Application CVE-2025-56515: Cross-Site Scripting XSS Vulnerability in Fiora Chat Application Vulnerability Overview CVE ID : CVE-2025-56515 Vulnerability Type : Cross-Site Scripting XSS Attack Type : Remote Impact : Code Executio...

CVE-2023-33977

CVE-2023-33977 Stored XSS Via SVG Upload in kiwitcms/kiwi - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the kiwitcms/kiwi application, which was assigned the CVE-2023-33977 identifier. The vulnerability allows for the execution of malicious...

CVE-2022-32060

Snipe-IT Versión v6.0.2 Explicación de la vulnerabilidad: Una vulnerabilidad de carga arbitraria de archivos en el componente de Actualización de Configuración de Marca de Snipe-IT v6.0.2 permite a los atacantes ejecutar código arbitrario a través de un archivo manipulado. Vectores de ataque:...

CVE-2025-60880

CVE-2025-60880：Bagisto 管理面板中的存储型跨站脚本（XSS）漏洞 Bagisto 2.3.6 管理面板的产品创建路径中存在一个已认证的存储型 XSS 漏洞，允许攻击者上传包含恶意 JavaScript 代码的特制 SVG 文件。该漏洞可被已认证的管理员用户利用，在浏览器中执行任意 JavaScript，可能导致会话劫持、数据窃取或未授权操作。 漏洞概述 CVE ID ：CVE-2025-60880 类型 ：跨站脚本（XSS） CVSS 评分 ：6.9（中危） CVSS 向量 ：CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N...

CVE-2024-34452

CVE-2024-34452 - Cross-Site Scripting XSS Vulnerability in CMSimpleXH Overview A cross-site scripting XSS vulnerability has been identified in CMSimpleXH version 1.7.6. This vulnerability allows authorized users to upload SVG files containing malicious JavaScript code. The issue stems from...

CVE-2023-34845

CVE-2023-34845 POC de vulnerabilidad para CVE-2023-34845 Vulnerabilidad Encontré un ataque de cross-site scripting en la página de creación de nuevo contenido http://localhost:800/admin/new-content esto ejecutará el script en el contexto del usuario, permitiendo al atacante acceder a cualquier...

CVE-2024-50803-Redaxo

CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A stored cross-site scripting XSS vulnerability was found in Redaxo versions 5.18.0, allowing attackers with sufficient privileges to upload a malicious SVG file through the mediapool feature. Published a write-up :...

CVE-2023-50465

MonicaHQ XSS 利用 MonicaHQ XSS 创建一个账户 创建一个联系人 在文档中上传一个恶意的 SVG 文件 root@kitploit: alert"Monicahq XSS Poc"; 访问上传的文件...

CVE-2025-63830

📂 CKFinder 1.4.3 – Cross-Site Scripting XSS Almacenado mediante Carga de SVG Malicioso CVE ID: CVE-2025-63830 🧭 Resumen Se identificó una vulnerabilidad de Cross-Site Scripting XSS almacenado en CKFinder v1.4.3. El problema reside en la funcionalidad de carga de archivos , que no sanitiza...

CVE-2026-81927 Concrete CMS before 9.5.3 is vulnerable to Stored XSS via SVG upload in "Reject" sanitization mode

Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processing was set to the non-default "Reject files containing potentially harmful elements" mode concrete.filemanager.images.svgsanitization.action = reject, uploaded SVGs were checked...

CVE-2026-81927

Concrete CMS before 9.5.3 contained a stored XSS vulnerability in SVG file handling, triggered only when the non-default "Reject files containing potentially harmful elements" sanitization mode was active. In this mode, uploaded SVGs were validated solely against a small built-in blocklist (the s...

CVE-2026-81927 Concrete CMS before 9.5.3 is vulnerable to Stored XSS via SVG upload in "Reject" sanitization mode

Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processing was set to the non-default "Reject files containing potentially harmful elements" mode concrete.filemanager.images.svgsanitization.action = reject, uploaded SVGs were checked...

Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098

Magnolia CMS = 6.2.19 Stored Cross Site Scripting CVE-2022-33098 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision: 1.0 Impact: Stored cross-site scripting in Magnolia CMS 6.2.19...

EUVD-2026-77677

EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, FileField and ImageField can accept browser-executable uploads while templates/crud/field/file.html.twig links to stored files for inline same-origin rendering without a download attribute or...

CVE-2026-90931

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline...

EUVD-2026-77449

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline...

CVE-2026-90931

LaraDashboard versions 0.9.0 through 1.2.2 are affected by a stored XSS vulnerability caused by failure to sanitize SVG file content during media upload. An authenticated user with only the media.create permission can upload a malicious SVG file containing embedded script tags. When any user—incl...