Skip to content
OpenAdvisories

Product · RoastSlav

quickdrop

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-35608

    QuickDrop has stored XSS in SVG file preview endpoint allowing JavaScript execution

    QuickDrop is an easy-to-use file sharing application. Prior to 1.5.3, a stored XSS vulnerability exists in the file preview endpoint. The application allows SVG files to be uploaded via the /api/file/upload-chunk endpoint. An attacker can upload a specially c…

    RoastSlav quickdrop