Vulnerabilidades de Icret
CVEs publicadas que afetam produtos de Icret: 1 registro(s), com severidade, exploração e correções.
CVE-2025-13415
Média · 5.4
CWE-79 19/11/2025
icret EasyImages SVG Image upload.php cross site scripting
A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely.