CVE-2025-13415
icret EasyImages SVG Image upload.php cross site scripting
Résumé
icret EasyImages SVG Image upload.php cross site scripting
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com