CVE-2025-56514

Published October 1st, 2025

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users.

Kov404/CVE-2025-56514

Cross Site Scripting (XSS) Vulnerability in Fiora Chat Application

GitHub

yinxin630/fiora

An interesting open source chat application. Developed with node.js, mongoDB, socket.io and react

GitHub

7.16K