Threats tagged 'ghsa-622j-2666-j97g'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-13415icret EasyImages · Cross-site Scripting Medium5.12025-11-20GCVE DatabaseCVE-2025-13415 A cross-site scripting (XSS) vulnerability exists in icret EasyImages up to version 2.8.6 in the SVG Image Handler component, specifically in the /app/upload.php file. The vulnerability arises from improper handling of the File argument, allowing remote attackers to execute script code. The CVSS score is 3.5, indicating a low severity impact. Report on CVE-2025-13415 Vulnerability CWE-79 #ghsa-622j-2666-j97g	GCVE Database	2025-11-20

Page 1 of 1