Skip to content
OpenAdvisories

Vendor

zusam

1 known vulnerabilities.

Products

zusam 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-51492

    Zusam vulnerable to stored XSS, allowing token theft via crafted SVG

    Zusam is a free and open-source way to self-host private forums. Prior to version 0.5.6, specially crafted SVG files uploaded to the service as images allow for unrestricted script execution on (raw) image load. With certain payloads, theft of the target user…

    zusam zusam