Beveiligingsadvies

CVE-2025-3189

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-04 12:44:06
Laatst bijgewerkt 2025-04-04 14:45:58
Toegewezen door INCIBE
CVSS-score 4.8
Status PUBLISHED

Beschrijving

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it.