CVE-2025-8798

The CVE-2025-8798 entry concerns oitcode samarium versions up to 0.9.6. The vulnerability is an unrestricted file upload in the /dashboard/product area of the Create Product Page component. The underlying issue allows a remote attacker to upload arbitrary files, with exploitation being publicly d...

CVE-2025-9422

CVE-2025-9422 affects oitcode Samarium up to version 0.9.6, specifically the Team Image Handler component in the /dashboard/team path. The vulnerability enables cross-site scripting (XSS) and may be triggered remotely; exploitation is publicly known. Multiple sources corroborate the issue but do ...