CVE-2025-13415: icret EasyImages SVG Image upload.php cross site scripting
A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13415?
CVE-2025-13415 is classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2025-13415?
To fix CVE-2025-13415, update icret EasyImages to version 2.8.7 or later, where the vulnerability has been addressed.
What type of vulnerability is CVE-2025-13415?
CVE-2025-13415 is a cross-site scripting (XSS) vulnerability affecting the SVG Image Handler component.
Which software versions are affected by CVE-2025-13415?
CVE-2025-13415 affects icret EasyImages versions up to and including 2.8.6.
Can CVE-2025-13415 be exploited remotely?
Yes, CVE-2025-13415 can be exploited remotely, allowing attackers to manipulate the File argument.