PT-2025-39655
CVE-2025-11027
·
Published
2025-09-26
·
Updated
2026-10-09
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
givanz Vvveb versions up to 1.0.7.2
Description
A cross-site scripting issue exists in the SVG File Handler component. This manipulation can be launched remotely. The exploit is publicly available.
Recommendations
Update to a version beyond 1.0.7.2.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾