CVE-2025-13784: yungifez Skuul School Management System vulnerable to XSS via SVG
A weakness has been identified in yungifez Skuul School Management System up to 2.6.5. This vulnerability affects unknown code of the file /dashboard/schools/1/edit of the component SVG File Handler. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Other sources
yungifez Skuul School Management System vulnerable to XSS via SVG
— Packagist
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13784?
CVE-2025-13784 is classified as a cross-site scripting (XSS) vulnerability, which can have high severity due to potential exploitation.
How do I fix CVE-2025-13784?
To fix CVE-2025-13784, update the yungifez Skuul School Management System to a version higher than 2.6.5, where this vulnerability is addressed.
What components are affected by CVE-2025-13784?
CVE-2025-13784 affects the SVG File Handler component of the yungifez Skuul School Management System.
What are the potential impacts of CVE-2025-13784?
Exploitation of CVE-2025-13784 could lead to unauthorized script execution in users' browsers, compromising user data and session integrity.
Who is affected by CVE-2025-13784?
All users and administrators of yungifez Skuul School Management System versions up to 2.6.5 are potentially affected by CVE-2025-13784.