CVE-2026-14856

CVE-2026-14856 : A stored XSS in the Media Manager’s file upload (SVG) of TastyIgniter v4.3.0 arises from insufficient validation/sanitization of SVG files. An authenticated, low-privilege user can upload a malicious SVG; when an administrator views it, JavaScript executes in the admin’s browser....