Skip to content
OpenAdvisories

Package · npm

fiora

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2025-56515 Public exploit

    Fiora chat group avatar is vulnerable to XSS via SVG files

    File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript eve…

    fiora npm
  • Medium 4.6
    CVE-2025-56514 Public exploit

    Fiora chat user avatar is vulnerable to XSS via SVG files

    Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users.

    fiora npm