tag

Svg-Upload

VvvebJs SVG Upload Stored Cross-Site Scripting — CVE-2026-5615

CVE-2026-5615· VvvebJs (drag-and-drop website builder) unpatched

TypiCMS Core — Stored XSS via Unsanitized SVG File Upload (CVE-2026-27621)

CVE-2026-27621 (GHSA-xfvg-8v67-j7wp)· TypiCMS Core (typicms/core) patched