CVE-2025-45002

Vigybag v1.0 and earlier versions are vulnerable to Cross-Site Scripting (XSS) via the upload profile picture function located under the user's profile. This vulnerability allows for the potential execution of malicious scripts. As a temporary workaround, it is recommended to disable the upload p...