CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

NVD•added 2025/09/26 3:16 p.m.•3 views

CVE-2025-57292

Todoist v8484 contains a stored cross-site scripting XSS vulnerability in the avatar upload functionality. The application fails to properly validate the MIME type and sanitize image metadata...

6.1CVSS0.00053EPSS

Exploits1References2

OSV•added 2025/09/26 3:16 p.m.•0 views

CVE-2025-57292

Todoist v8484 contains a stored cross-site scripting XSS vulnerability in the avatar upload functionality. The application fails to properly validate the MIME type and sanitize image metadata...

6.1CVSS5.6AI score0.00053EPSS

Exploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by