Skip to content
OpenAdvisories

Archive

1 October 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-56515 Public exploit

    Fiora chat group avatar is vulnerable to XSS via SVG files

    File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript eve…