PT-2026-103075
CVE-2025-14564
·
تاريخ النشر
2026-09-29
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
6.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Viable URL Media Uploader versions prior to 1.0.1
Description
Insufficient input sanitization and output escaping allow authenticated attackers with Author-level access and above to perform Stored Cross-Site Scripting (XSS). This occurs through the upload of SVG files, enabling the injection of arbitrary web scripts that execute when a user accesses the uploaded file.
Recommendations
Update Viable URL Media Uploader to version 1.0.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾