Skip to content
OpenAdvisories

Package · npm

fiora

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-56515 Public exploit

    Fiora chat group avatar is vulnerable to XSS via SVG files

    File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript eve…

    fiora npm