Threats Tagged 'cve-2026-81931'

CVE-2026-81931 is a medium severity vulnerability in Roskus Prospero Flow CRM before version 5.16.0. It allows an authenticated user with create product permission to upload files with dangerous types that can lead to arbitrary JavaScript execution in the application origin. The vulnerability arises because the product photo upload feature validates files only by their content signature and rejects only certain PHP extensions, but stores files using the client-supplied extension in a public web directory. This enables an attacker to upload a file that appears as an image by header but has an HTML extension, which is served as text/html and executed by browsers.

CVE-2026-81931 is a medium severity vulnerability in Roskus Prospero Flow CRM versions prior to 5.16.0. It allows an authenticated user with create product permission to upload files with dangerous types, leading to stored cross-site scripting (XSS) via arbitrary JavaScript execution. The vulnerability arises because the product photo upload feature validates files only by magic bytes and rejects a fixed list of PHP extensions, but uses the client-supplied file extension when storing the file in the public web root. This enables an attacker to upload a file that starts with an image header but has an HTML extension, which is served as text/html and executes script in the application origin.