G3XAR/Vulnerability-Research

Releases0

CVEs & PoCs

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-55944 ↗	Sep 3, 2025Wednesday, 3 September 2025, 16:15	6.1 MEDIUM	—
Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads. When a user views the shared image in a new browser tab, the embedded JavaScript executes. The issue affects both authenticated and unauthenticated users.